From 990796660c1f298fa69259e9fc5b59838b068333 Mon Sep 17 00:00:00 2001
From: Michael Bauer <michael-bauer@posteo.de>
Date: Tue, 5 Nov 2024 11:19:10 +0100
Subject: [PATCH] Remove (nonfunctioning) back_url-check
---
aleksis/apps/alsijil/views.py | 7 -------
1 file changed, 7 deletions(-)
diff --git a/aleksis/apps/alsijil/views.py b/aleksis/apps/alsijil/views.py
index 776493de4..ea8100a29 100644
--- a/aleksis/apps/alsijil/views.py
+++ b/aleksis/apps/alsijil/views.py
@@ -68,13 +68,6 @@ def full_register_for_group(request: HttpRequest, ids: str) -> HttpResponse:
)
back_url = request.GET.get("back", "")
- back_url_is_safe = url_has_allowed_host_and_scheme(
- url=back_url,
- allowed_hosts={request.get_host()},
- require_https=request.is_secure(),
- )
- if not back_url_is_safe:
- back_url = reverse("my_groups")
return render_progress_page(
request,
--
GitLab