From 4d9dfe7d041be8730d7beda94311566d7267cb33 Mon Sep 17 00:00:00 2001 From: Aditya Toshniwal Date: Tue, 20 Sep 2022 14:44:05 +0530 Subject: [PATCH] Allow script name URLs in the next URL of the login page. refs #5343 --- web/pgadmin/utils/__init__.py | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/web/pgadmin/utils/__init__.py b/web/pgadmin/utils/__init__.py index 97c91a419..47e564d3d 100644 --- a/web/pgadmin/utils/__init__.py +++ b/web/pgadmin/utils/__init__.py @@ -838,8 +838,12 @@ def get_safe_post_login_redirect(): allow_list = [ url_for('browser.index') ] - url = get_post_login_redirect() - if url in allow_list: - return url + if "SCRIPT_NAME" in os.environ and os.environ["SCRIPT_NAME"]: + allow_list.append(os.environ["SCRIPT_NAME"]) - return "/" + url = get_post_login_redirect() + for item in allow_list: + if url.startswith(item): + return url + + return os.environ.get("SCRIPT_NAME", "/")