We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 58ae5f3 commit 493d53fCopy full SHA for 493d53f
djangosaml2/views.py
@@ -355,8 +355,7 @@ def post(self,
355
custom_redirect_url = self.custom_redirect(user, relay_state, session_info)
356
if custom_redirect_url:
357
return HttpResponseRedirect(custom_redirect_url)
358
- if not is_safe_url(url=relay_state, allowed_hosts={self.request.get_host()}):
359
- relay_state = settings.LOGIN_REDIRECT_URL
+ relay_state = validate_referral_url(request, relay_state)
360
logger.debug('Redirecting to the RelayState: %s', relay_state)
361
return HttpResponseRedirect(relay_state)
362
0 commit comments