0001-utils-verify-next_url-without-encoding-it.patch
src/authentic2/utils.py | ||
---|---|---|
890 | 890 | |
891 | 891 | |
892 | 892 |
def get_next_url(params, field_name=None): |
893 |
field_name = field_name or REDIRECT_FIELD_NAME |
|
894 | 893 |
'''Extract and decode a next_url field''' |
894 |
field_name = field_name or REDIRECT_FIELD_NAME |
|
895 | 895 |
next_url = params.get(field_name) |
896 | 896 |
if not next_url: |
897 | 897 |
return None |
898 | 898 |
try: |
899 |
next_url = next_url.encode('ascii')
|
|
899 |
next_url.encode('ascii') |
|
900 | 900 |
except UnicodeEncodeError: |
901 | 901 |
return None |
902 | 902 |
if not is_valid_url(next_url): |
903 |
- |