Actions
Bug #6249
closed
Login redirect to invalid URLs
Description
Login redirect seams to be allowing redirect to URLs it shouldn't. For example if you're letting it return to the previous location then the previous location URL should be verified that it even makes sense. You shouldn't be able to login redirect to the confirmation page or registration page for example.
https://www.joomlapolis.com/forum/255-developer-members-support/235024-error-first-login#286982
Updated by krileon about 8 years ago
- Status changed from Assigned to Resolved
- % Done changed from 0 to 100
Fixed in MR !1138
There was a missing return url check for the confirm page (check already existed for login, logout, register, and forgot login pages).
Actions