[FIX] auth_oauth: quote redirect url in state
Otherwise, Firefox is splitting the state at the first &, which can potentially be located in the redict param of the state
This commit is contained in:
@@ -70,7 +70,7 @@ class OAuthLogin(openerp.addons.web.controllers.main.Home):
|
||||
return dict(
|
||||
d=request.session.db,
|
||||
p=provider['id'],
|
||||
r=request.httprequest.full_path
|
||||
r=werkzeug.url_quote_plus(request.httprequest.full_path)
|
||||
)
|
||||
|
||||
@http.route()
|
||||
|
||||
Reference in New Issue
Block a user