mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-05 00:29:48 +03:00
Login can lead to a redirect to another site #1689
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ssddanbrown on GitHub (Apr 28, 2020).
Describe the bug
The redirect-upon-login logic can cause a redirect back to the original referrer.
Steps To Reproduce
On a fresh session, Click the "Open Demo" button on the main BookStack site, then login.
You'll be redirected back to bookstack site.
Expected behavior
You land on a page that's not external from the BookStack instance.