After being prompted by Jamie on IRC, I reexamined the differences
between the upstream commit and the supplied patch for the openid issue,
and the patch in the debdiff is missing the following chunk:
@@ -111,7 +111,7 @@ function openid_form_alter(&$form, $form_state, $form_id) {
'#weight' => -1,
'#description' => l(t('What is OpenID?'), 'http://openid.net/',
array('external' => TRUE)),
);
- $form['openid.return_to'] = array('#type' => 'hidden', '#value' =>
url('openid/authenticate', array('absolute' => TRUE, 'query' =>
user_login_destination())));
+ $form['openid.return_to'] = array('#type' => 'hidden', '#value' =>
url('openid/authenticate', array('absolute' => TRUE, 'query' =>
drupal_get_destination())));
}
elseif ($form_id == 'user_register' && isset($_SESSION['openid']['values']))
{
// We were unable to auto-register a new user. Prefill the registration
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/539056
Title:
backport security fixes from 6.19 and 5.23
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs