[Catalyst] Trusting $c->req->uri after login
    Gavin Henry 
    gavin.henry at gmail.com
       
    Mon Sep 18 10:50:36 GMT 2017
    
    
  
Nevermind, I'd already done thought about this. Please ignore:
    if ( !$c->user_exists ) {
        $c->log->debug('***User not found, forwarding to /login')
          if $c->debug();
        # $c->uri_for will return the URL for the current action namespace,
        # so, if you request /customers/faxes, we'll get /customers/faxes
        # that way we don't trust $c->req->uri, even though looking at the code
        # Catalyst it's OK
        $c->log->debug( 'Saving previous URI: ' . $c->uri_for() )
          if $c->debug();
        $c->flash->{redirect_after_login} = $c->uri_for();
        $c->response->redirect( $c->uri_for('/login') );
        $c->detach();
    }
    
    
More information about the Catalyst
mailing list