Skip to content
This repository was archived by the owner on Oct 22, 2019. It is now read-only.

don't allow signin view redirect to different host#541

Open
meomap wants to merge 1 commit intobread-and-pepper:masterfrom
meomap:signin-view-safe-url-redirect
Open

don't allow signin view redirect to different host#541
meomap wants to merge 1 commit intobread-and-pepper:masterfrom
meomap:signin-view-safe-url-redirect

Conversation

@meomap
Copy link
Copy Markdown
Contributor

@meomap meomap commented Nov 22, 2016

Current signin view accept next parameter for redirect after login successfully but it don't safe check url. It could be exploited to redirect to different page other than current host

@coveralls
Copy link
Copy Markdown

Coverage Status

Coverage increased (+0.01%) to 95.592% when pulling a22fe9d on meomap:signin-view-safe-url-redirect into 7dfb3d5 on bread-and-pepper:master.

@bclermont
Copy link
Copy Markdown

so this project is dead or what? bugs fix are ignored?

@wunki
Copy link
Copy Markdown
Member

wunki commented Jan 19, 2017

I have not been using Django for years, but @swistakm has done a tremendous job keeping this project alive. If however he also doesn't have the time anymore, it's up to him to declare it dead. Or maybe a new maintainer steps up.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants