fixed redirect

2014-06-24 12:46:17 -05:00
parent bf52e012a7
commit d712d3b83c
2 changed files with 2 additions and 2 deletions
@@ -1 +1 @@
-Version 2.9.5-trunk+timestamp.2014.06.23.01.02.07
+Version 2.9.5-trunk+timestamp.2014.06.24.12.45.10
@@ -2331,7 +2331,7 @@ class Auth(object):
        snext = self.get_vars_next()
        if snext and self.settings.prevent_open_redirect_attacks:
            items = snext.split('/')
-            if len(items)<3 or not items[2] == request.env.http_host:
+            if '//' in snext and items[2] != request.env.http_host:
                snext = None
                
        if snext: