crans/scripts
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[wiki] no redirect if "ticket" given

Browse source 
le paramètre ticket (ticket cas) interfère avec la suppression des fichiers, qui
utilise aussi un ticket (ticket moinmoin) pour prévenir des csrf.
This commit is contained in:
Daniel STAN 2013-07-13 18:43:33 +02:00
parent 6608a45f10
commit c6c1d93c98
1 changed files with 0 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
wiki/auth/cas.py
View file

@ -131,8 +131,6 @@ class CASAuth(BaseAuth):
if not force and user_obj and user_obj.valid:
if self.action == action:
request.http_redirect(url)
if ticket:
request.http_redirect(url)
return user_obj, True
if self.ticket_path and request.method == 'POST':