From 2db6a0080f9eeac7030d6d2d856574f2192d8aa5 Mon Sep 17 00:00:00 2001 From: Denis Ledoux Date: Mon, 16 Jun 2014 22:40:31 +0200 Subject: [PATCH] [FIX] auth_oauth: quote redirect url in state Otherwise, Firefox is splitting the state at the first &, which can potentially be located in the redict param of the state --- addons/auth_oauth/controllers/main.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/addons/auth_oauth/controllers/main.py b/addons/auth_oauth/controllers/main.py index 08319b982fd..e3bd6c13580 100644 --- a/addons/auth_oauth/controllers/main.py +++ b/addons/auth_oauth/controllers/main.py @@ -70,7 +70,7 @@ class OAuthLogin(openerp.addons.web.controllers.main.Home): return dict( d=request.session.db, p=provider['id'], - r=request.httprequest.full_path + r=werkzeug.url_quote_plus(request.httprequest.full_path) ) @http.route()