Show More
@@ -25,7 +25,11 b' class LoginHandler(IPythonHandler):' | |||
|
25 | 25 | |
|
26 | 26 | def get(self): |
|
27 | 27 | if self.current_user: |
|
28 |
|
|
|
28 | next_url = self.get_argument('next', default=self.base_url) | |
|
29 | if not next_url.startswith(self.base_url): | |
|
30 | # require that next_url be absolute path within our path | |
|
31 | next_url = self.base_url | |
|
32 | self.redirect(next_url) | |
|
29 | 33 | else: |
|
30 | 34 | self._render() |
|
31 | 35 | |
@@ -47,8 +51,12 b' class LoginHandler(IPythonHandler):' | |||
|
47 | 51 | else: |
|
48 | 52 | self._render(message={'error': 'Invalid password'}) |
|
49 | 53 | return |
|
50 | ||
|
51 |
|
|
|
54 | ||
|
55 | next_url = self.get_argument('next', default=self.base_url) | |
|
56 | if not next_url.startswith(self.base_url): | |
|
57 | # require that next_url be absolute path within our path | |
|
58 | next_url = self.base_url | |
|
59 | self.redirect(next_url) | |
|
52 | 60 | |
|
53 | 61 | @classmethod |
|
54 | 62 | def get_user(cls, handler): |
General Comments 0
You need to be logged in to leave comments.
Login now