Redirect to /login if garbage is in query args

This commit is contained in:
--unset 2024-04-16 10:26:32 -04:00
parent 92bd7b80c8
commit 89b552a880

View File

@ -48,7 +48,10 @@ class PublicHandler(BaseHandler):
} }
if self.request.query: if self.request.query:
page_data["query"] = self.request.query_arguments.get("next")[0].decode() request_query = self.request.query_arguments.get("next")
if not request_query:
self.redirect("/login")
page_data["query"] = request_query[0].decode()
# sensible defaults # sensible defaults
template = "public/404.html" template = "public/404.html"