diff --git a/flask_security/utils.py b/flask_security/utils.py index 679ee61..ea3bffa 100644 --- a/flask_security/utils.py +++ b/flask_security/utils.py @@ -212,7 +212,7 @@ def validate_redirect_url(url): return False url_next = urlsplit(url) url_base = urlsplit(request.host_url) - if url_next.scheme and url_next.netloc != url_base.netloc: + if (url_next.netloc or url_next.scheme) and url_next.netloc != url_base.netloc: return False return True