fixed typo in recent commit
This commit is contained in:
+1
-1
@@ -2331,7 +2331,7 @@ class Auth(object):
|
|||||||
snext = self.get_vars_next()
|
snext = self.get_vars_next()
|
||||||
if snext and self.settings.prevent_open_redirect_attacks:
|
if snext and self.settings.prevent_open_redirect_attacks:
|
||||||
items = snext.split('/')
|
items = snext.split('/')
|
||||||
if len(items)<2 or not items[2] == request.env.http_host:
|
if len(items)<3 or not items[2] == request.env.http_host:
|
||||||
snext = None
|
snext = None
|
||||||
|
|
||||||
if snext:
|
if snext:
|
||||||
|
|||||||
Reference in New Issue
Block a user