diff options
| author | Jacob Kaplan-Moss <jacob@jacobian.org> | 2010-03-01 19:58:53 +0000 |
|---|---|---|
| committer | Jacob Kaplan-Moss <jacob@jacobian.org> | 2010-03-01 19:58:53 +0000 |
| commit | 6e748b5db4ea6db78ce389f474c2fb78ee3976ed (patch) | |
| tree | 0199bdb5c5f9f674d8de30b8ddc823a8cdf4de01 /docs | |
| parent | c8015052d935a99a5c8f96434b2d0cd16d8a4e14 (diff) | |
Fixed #11457: tightened the security check for "next" redirects after logins.
The new behavior still disallows redirects to off-site URLs, but now allows
redirects of the form `/some/other/view?foo=http://...`.
Thanks to brutasse.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12635 bcc190cf-cafb-0310-a4f2-bffc1f526a37
Diffstat (limited to 'docs')
0 files changed, 0 insertions, 0 deletions