Skip to content

Commit

Permalink
Fix an open-redirect vulnerability in GEIQ eligibility criteria views
Browse files Browse the repository at this point in the history
  • Loading branch information
francoisfreitag committed Apr 8, 2024
1 parent db124fb commit e2d75b6
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions itou/www/apply/views/common.py
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@
from itou.users.models import ApprovalAlreadyExistsError
from itou.utils import constants as global_constants
from itou.utils.htmx import hx_trigger_modal_control
from itou.utils.urls import add_url_params, get_external_link_markup
from itou.utils.urls import add_url_params, get_external_link_markup, get_safe_url
from itou.www.apply.forms import (
AcceptForm,
CheckJobSeekerGEIQEligibilityForm,
Expand Down Expand Up @@ -253,7 +253,7 @@ def _geiq_eligibility_criteria(
request.path,
data=request.POST or None,
)
next_url = request.GET.get("next_url")
next_url = get_safe_url(request, "next_url")
allowance_amount = None

if request.method == "POST" and form.is_valid():
Expand Down

0 comments on commit e2d75b6

Please sign in to comment.