github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-05-28 10:41:25 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

FIX: handle array in redirect param

Browse Source
This commit is contained in:
Arpit Jalan
2019-06-11 17:10:16 +05:30
parent f4fd75aea4
commit e2636f0ec7
2 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
app/controllers/static_controller.rb
View File

@ -89,10 +89,11 @@ class StaticController < ApplicationController
destination = path("/")
if params[:redirect].present? && !params[:redirect].match(login_path)
redirect_location = params[:redirect].to_s
if redirect_location.present? && !redirect_location.match(login_path)
begin
forum_uri = URI(Discourse.base_url)
uri = URI(params[:redirect])
uri = URI(redirect_location)
if uri.path.present? &&
(uri.host.blank? || uri.host == forum_uri.host) &&