Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[7.3-stable] Use safe redirect paths in admin redirects #3137

Merged
merged 2 commits into from
Jan 7, 2025

Conversation

tvdeyen
Copy link
Member

@tvdeyen tvdeyen commented Jan 7, 2025

Backport

This will backport the following commits from main to 7.3-stable:

Questions ?

Please refer to the Backport tool documentation

This makes sure we only redirect internally in the /admin routing context
and redirect to a given safe fallback location or the default admin route.

(cherry picked from commit b4e7ca4)
This makes sure all redirects we do in the admin via do_redirect_to uses a safe redirect url.

(cherry picked from commit 7adefce)

# Conflicts:
#	app/controllers/alchemy/admin/base_controller.rb
@tvdeyen tvdeyen requested a review from a team as a code owner January 7, 2025 20:08
Copy link

codecov bot commented Jan 7, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.47%. Comparing base (91cceb6) to head (cc0bb4c).
Report is 4 commits behind head on 7.3-stable.

Additional details and impacted files
@@             Coverage Diff             @@
##           7.3-stable    #3137   +/-   ##
===========================================
  Coverage       96.47%   96.47%           
===========================================
  Files             237      237           
  Lines            6408     6419   +11     
===========================================
+ Hits             6182     6193   +11     
  Misses            226      226           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@tvdeyen tvdeyen merged commit cd577e0 into 7.3-stable Jan 7, 2025
40 checks passed
@tvdeyen tvdeyen deleted the backport/7.3-stable/pr-3129 branch January 7, 2025 21:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant