diff options
| author | Gareth Rees <gareth@mysociety.org> | 2014-10-01 13:00:01 +0100 |
|---|---|---|
| committer | Louise Crow <louise.crow@gmail.com> | 2014-12-22 17:20:36 +0000 |
| commit | 39d8eaf778ae21701b10233266d44a4b2217b4a4 (patch) | |
| tree | beaaf7d691baf440f146c9d3930089fa49d8344c /app/controllers/track_controller.rb | |
| parent | 0a1a3536d2d2edb068f84b4a1c21c567ff51ea6a (diff) | |
Fix unvalidated redirects
Diffstat (limited to 'app/controllers/track_controller.rb')
| -rw-r--r-- | app/controllers/track_controller.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/app/controllers/track_controller.rb b/app/controllers/track_controller.rb index 40fa69290..b2fa1cf04 100644 --- a/app/controllers/track_controller.rb +++ b/app/controllers/track_controller.rb @@ -215,7 +215,7 @@ class TrackController < ApplicationController end flash[:notice] += "</ul>" - redirect_to params[:r] + redirect_to URI.parse(params[:r]).path end |