From 21db8211906c99c8800925d5a9f96e75a2401d0a Mon Sep 17 00:00:00 2001 From: Alexander Sulfrian Date: Mon, 11 Jan 2016 00:35:14 +0100 Subject: login: Do not redirect to /login If you accessed "/login" with "/login" as referrer, you got redirected to the login page again after successful login. --- utils/forms.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/utils/forms.py b/utils/forms.py index a6ff4de..59afe61 100644 --- a/utils/forms.py +++ b/utils/forms.py @@ -36,7 +36,7 @@ class RedirectMixin(object): def _get_redirect_target(self): for target in request.args.get('next'), request.referrer: - if not target: + if not target or target == request.url: continue if self._is_safe_url(target): return target -- cgit v1.2.3-1-g7c22