]> git.evergreen-ils.org Git - contrib/Conifer.git/commit
projects / contrib / Conifer.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 832a3dc) | patch
LP#1314827: On login, don't allow referer-based redirect to external site
authorJeff Davis <jdavis@sitka.bclibraries.ca>
Fri, 16 May 2014 22:14:43 +0000 (15:14 -0700)
committerBen Shum <bshum@biblio.org>
Fri, 3 Oct 2014 06:20:35 +0000 (02:20 -0400)
commit8943e1c8f2201a477af1f8089b95d781056fd2d6
treec3304b310103892c20db1b566216463637de1f7atree
parent832a3dc2bdde68b18b84b19bc80585242a69015fcommit | diff
LP#1314827: On login, don't allow referer-based redirect to external site

On /eg/opac/login, if no redirect_to param is provided, the TPAC will
attempt to use the referer (if any) as the redirect destination. This
leads to undesirable behavior if the referring URL is from an external
site.

Signed-off-by: Jeff Davis <jdavis@sitka.bclibraries.ca>
Signed-off-by: Ben Shum <bshum@biblio.org>
Open-ILS/src/templates/opac/parts/login/form.tt2 diff | blob | history
Evergreen contribs