Skip to content
This repository has been archived by the owner on Oct 22, 2019. It is now read-only.

don't allow signin view redirect to different host #541

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

meomap
Copy link
Contributor

@meomap meomap commented Nov 22, 2016

Current signin view accept next parameter for redirect after login successfully but it don't safe check url. It could be exploited to redirect to different page other than current host

@coveralls
Copy link

Coverage Status

Coverage increased (+0.01%) to 95.592% when pulling a22fe9d on meomap:signin-view-safe-url-redirect into 7dfb3d5 on bread-and-pepper:master.

@jeanlucmongrain
Copy link

so this project is dead or what? bugs fix are ignored?

@wunki
Copy link
Member

wunki commented Jan 19, 2017

I have not been using Django for years, but @swistakm has done a tremendous job keeping this project alive. If however he also doesn't have the time anymore, it's up to him to declare it dead. Or maybe a new maintainer steps up.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants