From e3aa83e1f44af9503fb55616d990e24997fc974f Mon Sep 17 00:00:00 2001 From: Martin Renvoize Date: Wed, 9 Nov 2022 08:27:44 +0000 Subject: [PATCH] Bug 31699: (follow-up) Protect against unauthorized redirects --- koha-tmpl/opac-tmpl/bootstrap/js/global.js | 2 +- opac/opac-user.pl | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/koha-tmpl/opac-tmpl/bootstrap/js/global.js b/koha-tmpl/opac-tmpl/bootstrap/js/global.js index 27fe084755e..ce5d4f64b6a 100644 --- a/koha-tmpl/opac-tmpl/bootstrap/js/global.js +++ b/koha-tmpl/opac-tmpl/bootstrap/js/global.js @@ -228,7 +228,7 @@ $(document).ready(function(){ var button = $(this); var context = button.data('return'); if ( context ) { - $('#modalAuth').append(''); + $('#modalAuth').append(''); } $("#loginModal").modal("show"); }); diff --git a/opac/opac-user.pl b/opac/opac-user.pl index 1b2aa815d29..a02e7f16acd 100755 --- a/opac/opac-user.pl +++ b/opac/opac-user.pl @@ -428,8 +428,10 @@ if ($search_query) { # back to the page we triggered the login from my $return = $query->param('return'); if ( $return ) { + my $uri = C4::Context->preference('OPACBaseURL'); + $uri .= $return; print $query->redirect( - -uri => $return, + -uri => $uri, -cookie => $cookie, ); } -- 2.39.0