Make validate_redirect_url smarter. Fixes #261.

pallets-eco · Jun 10, 2014 · 0facdaa · 0facdaa
1 parent 9cadf85
commit 0facdaa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/flask_security/utils.py b/flask_security/utils.py
@@ -196,7 +196,7 @@ def url_for_security(endpoint, **values):
 
 
 def validate_redirect_url(url):
-    if url is None:
+    if url is None or url.strip() == '':
         return False
     url_next = urlsplit(url)
     url_base = urlsplit(request.host_url)