#13751: Avoid open redirect issue with whitelist
-------------------------------------+-------------------------------------
     Reporter:  anonymous            |                    Owner:
                                     |  marcaurele
         Type:  New feature          |                   Status:  assigned
    Component:  HTTP handling        |                  Version:  master
     Severity:  Normal               |               Resolution:
     Keywords:  open redirect,       |             Triage Stage:  Accepted
  security                           |
    Has patch:  1                    |      Needs documentation:  0
  Needs tests:  0                    |  Patch needs improvement:  0
Easy pickings:  0                    |                    UI/UX:  0
-------------------------------------+-------------------------------------

Comment (by apollo13):

 I am for wontfixing, I do not see a good usecase for this now that we have
 ALLOWED_HOSTS already. Russ, since you initially accepted it: what are
 your thoughts on that?

--
Ticket URL: <https://code.djangoproject.com/ticket/13751#comment:17>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/067.86fee4dc5034d15a54153c3ba4c48e4e%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to