Skip to content

Commit 493d53f

Browse files
committed
ACS view can use validate_referral_url instead of is_safe_url
This was lost in the prior merge conflict resolution
1 parent 58ae5f3 commit 493d53f

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

djangosaml2/views.py

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -355,8 +355,7 @@ def post(self,
355355
custom_redirect_url = self.custom_redirect(user, relay_state, session_info)
356356
if custom_redirect_url:
357357
return HttpResponseRedirect(custom_redirect_url)
358-
if not is_safe_url(url=relay_state, allowed_hosts={self.request.get_host()}):
359-
relay_state = settings.LOGIN_REDIRECT_URL
358+
relay_state = validate_referral_url(request, relay_state)
360359
logger.debug('Redirecting to the RelayState: %s', relay_state)
361360
return HttpResponseRedirect(relay_state)
362361

0 commit comments

Comments
 (0)