From 5bc37add88e7c6a4a024845306b043ab4c6f4628 Mon Sep 17 00:00:00 2001
From: Nick Greenfield <boyd.greenfield@gmail.com>
Date: Wed, 1 Oct 2014 09:49:00 -0700
Subject: [PATCH] Update to use (url_next.netloc or url_next.scheme) in the
 validate_redirect_url open redirect patch.

---
 flask_security/utils.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/flask_security/utils.py b/flask_security/utils.py
index 679ee61..ea3bffa 100644
--- a/flask_security/utils.py
+++ b/flask_security/utils.py
@@ -212,7 +212,7 @@ def validate_redirect_url(url):
         return False
     url_next = urlsplit(url)
     url_base = urlsplit(request.host_url)
-    if url_next.scheme and url_next.netloc != url_base.netloc:
+    if (url_next.netloc or url_next.scheme) and url_next.netloc != url_base.netloc:
         return False
     return True