From 0facdaacd96430d71b2be82975a47a5ebcb2900a Mon Sep 17 00:00:00 2001 From: Matt Wright Date: Tue, 10 Jun 2014 10:48:56 -0400 Subject: [PATCH] Make `validate_redirect_url` smarter. Fixes #261. --- flask_security/utils.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/flask_security/utils.py b/flask_security/utils.py index 5b20352..ddca6be 100644 --- a/flask_security/utils.py +++ b/flask_security/utils.py @@ -196,7 +196,7 @@ def url_for_security(endpoint, **values): def validate_redirect_url(url): - if url is None: + if url is None or url.strip() == '': return False url_next = urlsplit(url) url_base = urlsplit(request.host_url)