"URL redirection from remote source" security issue fixed

helpers.py

@@ -27,6 +27,7 @@
 from flask import (
     Flask,
     flash,
+    url_for,
     request,
     session,
     redirect,

routes/dashboard.py

@@ -1,5 +1,6 @@
 from helpers import (
     flash,
+    url_for,
     request,
     session,
     sqlite3,
@@ -38,7 +39,12 @@ def dashboard(userName):
                         if "postDeleteButton" in request.form:
                             postID = request.form["postID"]
                             deletePost(postID)
-                            return redirect(f"/dashboard/{userName}")
+                            return (
+                                redirect(
+                                    url_for("dashboard.dashboard", userName=userName)
+                                ),
+                                301,
+                            )
                     comments = cursor.fetchall()
                     if posts:
                         showPosts = True

routes/login.py

@@ -1,5 +1,6 @@
 from helpers import (
     flash,
+    url_for,
     session,
     request,
     sqlite3,
@@ -25,7 +26,10 @@ def login(direct):
             match "userName" in session:
                 case True:
                     message("1", f'USER: "{session["userName"]}" ALREADY LOGGED IN')
-                    return redirect(direct)
+                    return (
+                        redirect(direct),
+                        301,
+                    )
                 case False:
                     form = loginForm(request.form)
                     if request.method == "POST":
@@ -48,10 +52,16 @@ def login(direct):
                                 addPoints(1, session["userName"])
                                 message("2", f'USER: "{user[1]}" LOGGED IN')
                                 flash(f"Welcome {user[1]}", "success")
-                                return redirect(direct)
+                                return (
+                                    redirect(direct),
+                                    301,
+                                )
                             else:
                                 message("1", "WRONG PASSWORD")
                                 flash("wrong  password", "error")
                     return render_template("login.html", form=form, hideLogin=True)
         case False:
-            return redirect(direct)
+            return (
+                redirect(direct),
+                301,
+            )

routes/post.py

@@ -4,6 +4,7 @@
     sqlite3,
     request,
     message,
+    url_for,
     redirect,
     addPoints,
     Blueprint,
@@ -47,7 +48,7 @@ def post(postID):
                     return redirect(f"/")
                 elif "commentDeleteButton" in request.form:
                     deleteComment(request.form["commentID"])
-                    return redirect(f"/post/{postID}")
+                    return redirect(url_for("post.post", postID=postID)), 301
                 else:
                     comment = request.form["comment"]
                     connection = sqlite3.connect(DB_COMMENTS_ROOT)
@@ -70,7 +71,7 @@ def post(postID):
                     )
                     addPoints(5, session["userName"])
                     flash("You earned 5 points by commenting ", "success")
-                    return redirect(f"/post/{postID}")
+                    return redirect(url_for("post.post", postID=postID)), 301
             connection = sqlite3.connect(DB_COMMENTS_ROOT)
             cursor = connection.cursor()
             cursor.execute(