IntenseWebs/pgadmin4
3
0
Fork 0
mirror of https://github.com/pgadmin-org/pgadmin4.git synced 2026-08-09 04:28:38 -05:00
Code Issues Packages Projects Releases Wiki Activity

Fixes a redirect vulnerability when the user opens the pgAdmin URL. Fixes #5343

Browse Source
This commit is contained in:
Aditya Toshniwal
2022-09-19 15:36:10 +05:30
committed by Akshay Joshi
parent bfabcea6e9
commit e2b00dda1b
4 changed files with 21 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/pgadmin/authenticate/__init__.py
+3 -4
View File
@@ -16,11 +16,10 @@ from flask import current_app, flash, Response, request, url_for, \
session, redirect
from flask_babel import gettext
from flask_security.views import _security
from flask_security.utils import get_post_logout_redirect, \
get_post_login_redirect, logout_user
from flask_security.utils import get_post_logout_redirect, logout_user
from pgadmin.model import db, User
from pgadmin.utils import PgAdminModule
from pgadmin.utils import PgAdminModule, get_safe_post_login_redirect
from pgadmin.utils.constants import KERBEROS, INTERNAL, OAUTH2, LDAP
from pgadmin.authenticate.registry import AuthSourceRegistry
@@ -145,7 +144,7 @@ def login():
if 'auth_obj' in session:
session.pop('auth_obj')
return redirect(get_post_login_redirect())
return redirect(get_safe_post_login_redirect())
elif isinstance(msg, Response):
return msg