Merge pull request #1536 from duckduckgo/la/disable-redir

disable open redirect
duckduckgo · Apr 29, 2021 · d88049d · d88049d
2 parents 45d6ad3 + 8c46a51
commit d88049d
Showing 1 changed file with 1 addition and 7 deletions.
diff --git a/templates/r.tx b/templates/r.tx
@@ -1,7 +1 @@
-: if $r_referer_validated {
-<html><head><script>window.opener=null</script><meta http-equiv='refresh' content="0;URL='<: $r_url | raw :>'">
-: } else {
-<html><head><script>window.opener=null</script><meta http-equiv='refresh' content="10;URL='<: $r_url | raw :>'">
-<body>Redirecting to external URL <a href="<: $r_url | raw :>"><: $r_url :></a> in 10 seconds.
-: }
-
+<body>An attempt to redirect you to <: $r_url :> has been blocked.</body>