diff options
| author | Aymeric Augustin <aymeric.augustin@m4x.org> | 2022-04-18 16:33:10 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2022-04-18 16:33:10 +0200 |
| commit | 5591a72571b8a07c5e3d87dcfe08310bb7611d15 (patch) | |
| tree | 152065942c5e56eb44dcb66e6234e9e00449e478 /django | |
| parent | fe7cb345448822528ce0447141810c27f9e56cff (diff) | |
Fixed #33648 -- Prevented extra redirect in LogoutView on invalid next page when LOGOUT_REDIRECT_URL is set.
Diffstat (limited to 'django')
| -rw-r--r-- | django/contrib/auth/views.py | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/django/contrib/auth/views.py b/django/contrib/auth/views.py index f86debde00..5de3989ffc 100644 --- a/django/contrib/auth/views.py +++ b/django/contrib/auth/views.py @@ -175,7 +175,10 @@ class LogoutView(SuccessURLAllowedHostsMixin, TemplateView): # Security check -- Ensure the user-originating redirection URL is # safe. if not url_is_safe: - next_page = self.request.path + if settings.LOGOUT_REDIRECT_URL: + next_page = resolve_url(settings.LOGOUT_REDIRECT_URL) + else: + next_page = self.request.path return next_page def get_context_data(self, **kwargs): |