Fixes #36768: Prevent redirection to other hosts via HTTP referer header

theforeman · Sep 21, 2023 · 84d990c · 84d990c
1 parent 57a8f55
commit 84d990c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
@@ -336,7 +336,7 @@ def process_ajax_error(exception, action = nil)
   end
 
   def redirect_back_or_to(url)
-    redirect_back(fallback_location: url)
+    redirect_back(fallback_location: url, allow_other_host: false)
   end
 
   def saved_redirect_url_or(default)