diff options
| author | Chris McDonough <chrism@agendaless.com> | 2009-05-31 17:01:34 +0000 |
|---|---|---|
| committer | Chris McDonough <chrism@agendaless.com> | 2009-05-31 17:01:34 +0000 |
| commit | 11ca87a2be684b1067c7135cc3cd483cc1372e0e (patch) | |
| tree | 35e500a82ecd396ab69804102c1ec7dd0fc47a03 /docs/tutorials/bfgwiki/src | |
| parent | 1db5469c9c189a1f5480e7f61e308a0179a2bd42 (diff) | |
| download | pyramid-11ca87a2be684b1067c7135cc3cd483cc1372e0e.tar.gz pyramid-11ca87a2be684b1067c7135cc3cd483cc1372e0e.tar.bz2 pyramid-11ca87a2be684b1067c7135cc3cd483cc1372e0e.zip | |
Never use the login view URL as the came_from.
Diffstat (limited to 'docs/tutorials/bfgwiki/src')
| -rw-r--r-- | docs/tutorials/bfgwiki/src/authorization/tutorial/login.py | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/tutorials/bfgwiki/src/authorization/tutorial/login.py b/docs/tutorials/bfgwiki/src/authorization/tutorial/login.py index 5fc94d480..293f3dcd5 100644 --- a/docs/tutorials/bfgwiki/src/authorization/tutorial/login.py +++ b/docs/tutorials/bfgwiki/src/authorization/tutorial/login.py @@ -12,7 +12,10 @@ from tutorial.run import USERS @bfg_view(for_=Wiki, name='login') def login(context, request): + login_url = model_url(context, request, 'login') referrer = request.environ.get('HTTP_REFERER', '/') + if referrer == login_url: + referrer = '/' # never use the login form itself as came_from came_from = request.params.get('came_from', referrer) message = '' login = '' |