fix: Make sure user input is not treated as safe in the oauth view (#…

…1978) Co-authored-by: Glenn Schuurman <[email protected]> Co-authored-by: Daniel Vaz Gaspar <[email protected]>
dpgaspar · Feb 1, 2023 · 3d17741 · 3d17741
1 parent 1e1c354
commit 3d17741
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/flask_appbuilder/templates/appbuilder/general/security/login_oauth.html b/flask_appbuilder/templates/appbuilder/general/security/login_oauth.html
@@ -6,7 +6,7 @@
 <script type="text/javascript">
     var baseLoginUrl = "{{appbuilder.get_url_for_login}}";
     var baseRegisterUrl = "{{appbuilder.get_url_for_login}}";
-    var next = "?next=" + encodeURIComponent("{{request.args.get('next', '') | safe}}");
+    var next = "?next=" + encodeURIComponent("{{request.args.get('next', '')}}");
 
     function signin(provider) {
         window.location.href = baseLoginUrl + provider + next;