dinislage/web2py
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed redirect

Browse Source
This commit is contained in:
mdipierro
2014-06-24 12:46:17 -05:00
parent bf52e012a7
commit d712d3b83c
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
VERSION
+1 -1
View File
@@ -1 +1 @@
Version 2.9.5-trunk+timestamp.2014.06.23.01.02.07 Version 2.9.5-trunk+timestamp.2014.06.24.12.45.10
gluon/tools.py
+1 -1
View File
@@ -2331,7 +2331,7 @@ class Auth(object):
snext = self.get_vars_next() snext = self.get_vars_next()
if snext and self.settings.prevent_open_redirect_attacks: if snext and self.settings.prevent_open_redirect_attacks:
items = snext.split('/') items = snext.split('/')
if len(items)<3 or not items[2] == request.env.http_host: if '//' in snext and items[2] != request.env.http_host:
snext = None snext = None
if snext: if snext: