#23330: RedirectResponse option to check the host of the url
-------------------------------+--------------------
Reporter: doctormo | Owner: nobody
Type: Uncategorized | Status: new
Component: HTTP handling | Version: master
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 1
Easy pickings: 0 | UI/UX: 0
-------------------------------+--------------------
https://github.com/django/django/pull/3094
Proposed addition.
When redirecting it's often useful to redirect to the 'next' url which is
passed from the browser. This variable might be altered before it gets
back to us and so we want to check that the host is a known local host and
approved. Because we don't want this to be checked all the time, it's
optional in the proposed code.
The patch/pull request uses the existing urlparser data to perform the
checks and the placement of the functionality seems like it would make a
good django contribution.
--
Ticket URL: <https://code.djangoproject.com/ticket/23330>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/051.eb0be93cbc3535bd6778a3404c83df9d%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
