More secure redirection URL.

echosystem · Oct 20, 2011 · 5f4369d · 5f4369d
1 parent d470e7a
commit 5f4369d
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/app/controllers/users/activations_controller.rb b/app/controllers/users/activations_controller.rb
@@ -63,7 +63,6 @@ def activate
             set_error 'users.activation.messages.failed'
             redirect_or_render_with_error(base_url, @user)
           end
-
         else
           # via_form === true, given email is not verified, therefore, send activation email
 
@@ -81,11 +80,11 @@ def activate
               end
             else
               set_error 'users.activation.messages.failed'
-              later_call_with_error(request.referer, signup_url, @user)
+              later_call_with_error(last_url, signup_url, @user)
             end
           else
-              set_error 'activerecord.errors.messages.blank', :attribute => I18n.t('application.general.email')
-              later_call_with_error(request.referer, signup_url, @user)
+            set_error 'activerecord.errors.messages.blank', :attribute => I18n.t('application.general.email')
+            later_call_with_error(last_url, signup_url, @user)
           end
         end
       end