From 33ace4ed46443eb072be3f985837ee12d644ac56 Mon Sep 17 00:00:00 2001 From: garrettmills Date: Fri, 23 Oct 2020 12:04:12 -0500 Subject: [PATCH] do not escape redirect URI on login page --- app/views/auth/form_page.pug | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/views/auth/form_page.pug b/app/views/auth/form_page.pug index 4d551b9..8cb2b10 100644 --- a/app/views/auth/form_page.pug +++ b/app/views/auth/form_page.pug @@ -4,7 +4,7 @@ block content h3.login-heading.mb-4 #{message} a.btn.btn-lg.btn-primary.btn-block.btn-login.text-uppercase.font-weight-bold.mb-2.form-submit-button(href=button_link) #{button_text} script. - const href = "#{button_link}" + const href = "!{button_link}" window.location.href = href .text-center