From c8a24a8647e9394a8cdf7dd947b333a1dc17da3f Mon Sep 17 00:00:00 2001 From: Josh Purvis Date: Sat, 24 Nov 2012 17:31:05 -0500 Subject: [PATCH] Wrapped next args with get_url() --- flask_security/views.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/flask_security/views.py b/flask_security/views.py index 71fef54..c079ea7 100644 --- a/flask_security/views.py +++ b/flask_security/views.py @@ -76,7 +76,8 @@ def login(): if not request.json: return redirect(get_post_login_redirect()) - form.next.data = request.args.get('next') or request.form.get('next') or '' + form.next.data = get_url(request.args.get('next')) \ + or get_url(request.form.get('next')) or '' if request.json: return _render_json(form, True)