You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The value retrieved in login_redirect is automatically un-escaped and needs to be re-escaped in order to be used in a querystring. Currently if the redirect url is something like "/page/?this=that" then the REDIRECT_QUERYSTRING will be "next=/page/?this=that" when it should be "next=/page/%3Fthis%3Dthat".
The way to work around this bug is to use {{ REDIRECT_FIELD_NAME }}={{ REDIRECT_FIELD_VALUE|urlencode }} in templates.
The text was updated successfully, but these errors were encountered:
correction... My workaround doesn't work if there's nothing to redirect to. It needs to be instead {% if REDIRECT_FIELD_VALUE %}{{ REDIRECT_FIELD_NAME }}={{ REDIRECT_FIELD_VALUE|urlencode }}{% endif %}
The
value
retrieved inlogin_redirect
is automatically un-escaped and needs to be re-escaped in order to be used in a querystring. Currently if the redirect url is something like "/page/?this=that" then theREDIRECT_QUERYSTRING
will be "next=/page/?this=that" when it should be "next=/page/%3Fthis%3Dthat".The way to work around this bug is to use
{{ REDIRECT_FIELD_NAME }}={{ REDIRECT_FIELD_VALUE|urlencode }}
in templates.The text was updated successfully, but these errors were encountered: