Projet

Général

Profil

0001-views-validates-EditProfile-next_url-33084.patch

Benjamin Dauvergne, 14 mai 2019 17:15

Télécharger (1,12 ko)

Voir les différences: 

Subject: [PATCH] views: validates EditProfile next_url (#33084)


 src/authentic2/views.py | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)
src/authentic2/views.py
144 144 
        return kwargs
145 145 

  		




  146
  146
  
    
    def get_success_url(self):

  		




  147
  
  
    
        field_name = 'edit-profile-next_url'

  		




  148
  
  
    
        if self.request.method == 'POST' and field_name in self.request.POST:

  		




  149
  
  
    
            return self.request.POST[field_name]

  		




  150
  
  
    
        return reverse('account_management')

  		




  
  147
  
    
        return utils.select_next_url(

  		




  
  148
  
    
            self.request,

  		




  
  149
  
    
            default=reverse('account_management'),

  		




  
  150
  
    
            field_name='edit-profile-next_url',

  		




  
  151
  
    
            include_post=True)

  		




  151
  152
  
    

  		




  152
  153
  
    
    def post(self, request, *args, **kwargs):

  		




  153
  154
  
    
        if 'cancel' in request.POST:

  		




  154
  
  
    
-