diff options
| author | Jacob Kaplan-Moss <jacob@jacobian.org> | 2010-03-01 20:06:20 +0000 |
|---|---|---|
| committer | Jacob Kaplan-Moss <jacob@jacobian.org> | 2010-03-01 20:06:20 +0000 |
| commit | 6b94c64554b672cdc0ef4b812ce1c7636ce28210 (patch) | |
| tree | 7c109a57e6d96b07dfe2ee2e1f88a557668efc2e /docs/ref | |
| parent | 5f3a53036d242e25e263a4201e8ef99ee0418471 (diff) | |
[1.1.X] Fixed #11457: tightened the security check for "next" redirects after logins.
The new behavior still disallows redirects to off-site URLs, but now allows
redirects of the form `/some/other/view?foo=http://...`.
Thanks to brutasse.
Backport of [12635] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@12636 bcc190cf-cafb-0310-a4f2-bffc1f526a37
Diffstat (limited to 'docs/ref')
0 files changed, 0 insertions, 0 deletions