From b36e784ff225458eed9cb24a41aa52158635b449 Mon Sep 17 00:00:00 2001 From: Martin Trigaux Date: Fri, 3 Dec 2021 12:54:26 +0000 Subject: [PATCH] [FIX] website: allow redirection to external websites Before this commit, the redirections were only possible localy (e.g. making a redirection to https://www.bloggiflette.com/potimarroniflette on https://www.odoo.com was redirecting to https://www.odoo.com/potimarroniflette) It is safe to allow external URLs as only Website Designers can modify it. closes odoo/odoo#80874 X-original-commit: 133424025b22454fa88252806282f647e158d390 Signed-off-by: Martin Trigaux (mat) --- addons/website/models/ir_http.py | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/addons/website/models/ir_http.py b/addons/website/models/ir_http.py index 00761d13c56..99b420f83fb 100644 --- a/addons/website/models/ir_http.py +++ b/addons/website/models/ir_http.py @@ -346,7 +346,10 @@ class Http(models.AbstractModel): redirect = cls._serve_redirect() if redirect: - return request.redirect(_build_url_w_params(redirect.url_to, request.params), code=redirect.redirect_type) + return request.redirect( + _build_url_w_params(redirect.url_to, request.params), + code=redirect.redirect_type, + local=False) # safe because only designers can specify redirects return False