wassname/flask-security
1
0
Fork 0
mirror of https://github.com/wassname/flask-security.git synced 2026-08-04 12:54:05 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update to use (url_next.netloc or url_next.scheme) in the validate_redirect_url open redirect patch.

Browse Source
This commit is contained in:
Nick Greenfield
2014-10-01 09:49:00 -07:00
parent 8b036f2a3e
commit 5bc37add88
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
flask_security/utils.py
+1 -1
View File
@@ -212,7 +212,7 @@ def validate_redirect_url(url):
return False
url_next = urlsplit(url)
url_base = urlsplit(request.host_url)
if url_next.scheme and url_next.netloc != url_base.netloc:
if (url_next.netloc or url_next.scheme) and url_next.netloc != url_base.netloc:
return False
return True