diff --git a/VERSION b/VERSION index 7cca3b46..b26a2100 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -Version 2.9.5-trunk+timestamp.2014.06.23.01.02.07 +Version 2.9.5-trunk+timestamp.2014.06.24.12.45.10 diff --git a/gluon/tools.py b/gluon/tools.py index 02c3103d..84328e1b 100644 --- a/gluon/tools.py +++ b/gluon/tools.py @@ -2331,7 +2331,7 @@ class Auth(object): snext = self.get_vars_next() if snext and self.settings.prevent_open_redirect_attacks: items = snext.split('/') - if len(items)<3 or not items[2] == request.env.http_host: + if '//' in snext and items[2] != request.env.http_host: snext = None if snext: