Fix open redirect GHSL-2024-288 (#8811)

SickChill · Dec 10, 2024 · c7128a8 · c7128a8
1 parent fc3c53a
commit c7128a8
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/sickchill/views/authentication.py b/sickchill/views/authentication.py
@@ -28,8 +28,7 @@ def post(self, next_=None):
             logger.warning(_("User attempted a failed login to the SickChill web interface from IP: ") + self.request.remote_ip)
             login_error = _("Incorrect username or password! Both username and password are case sensitive!")
 
-        next_ = self.get_query_argument("next", next_)
-        self.redirect(next_ or "/" + settings.DEFAULT_PAGE + "/")
+        self.redirect("/" + settings.DEFAULT_PAGE + "/")
 
 
 class LogoutHandler(BaseHandler):