#23330: RedirectResponse option to check the host of the url
-------------------------------+--------------------------------------
Reporter: doctormo | Owner: nobody
Type: Uncategorized | Status: new
Component: HTTP handling | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Unreviewed
Has patch: 1 | Needs documentation: 0
Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------+--------------------------------------
Comment (by timgraham):
I guess I am wondering if this won't give a false sense of security. If an
attacker is in a position to modify the page/URL as you describe, haven't
you already lost? Do you foresee this being a problem for sites that take
basic security measures such as serving pages over SSL to prevent
tampering? Are there other web frameworks that offer the functionality you
are proposing?
--
Ticket URL: <https://code.djangoproject.com/ticket/23330#comment:7>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/066.b299cd5733dbc1fca0522698ab9be2aa%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
