From 925065b1fed03710cef9018c2078b95b0fa425ad Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Mon, 4 Mar 2019 07:02:58 +0300
Subject: Revert "login: only allow relative URLs in return="

This reverts commit c68ac04020d85a296c784de18f8def3f365f9f6a.
---
 classes/handler/public.php | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

(limited to 'classes/handler/public.php')

diff --git a/classes/handler/public.php b/classes/handler/public.php
index 16f8020bb..c3f18d8bb 100755
--- a/classes/handler/public.php
+++ b/classes/handler/public.php
@@ -712,10 +712,8 @@ class Handler_Public extends Handler {
 				user_error("Failed login attempt for $login from {$_SERVER['REMOTE_ADDR']}", E_USER_WARNING);
 			}
 
-			$return = clean($_REQUEST['return']);
-
-			if ($return && !is_absolute_url($return)) {
-				header("Location: " . $return);
+			if (clean($_REQUEST['return'])) {
+				header("Location: " . clean($_REQUEST['return']));
 			} else {
 				header("Location: " . get_self_url_prefix());
 			}
-- 
cgit v1.2.3