Tim NyborgandGitHub 99d3d1d465 prevent open redirects with no protocol specified ...

prevent_open_redirect doesn't currently handle a 'next' with a // but no protocol, e.g.: .../user/login?_next=//google.com

2019-05-20 11:27:21 +01:00

262 KiB

Raw Permalink Blame History

View Raw