Skip to content

Commit f90547b

Browse files
Potential fix for code scanning alert no. 3: Reflected server-side cross-site scripting
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
1 parent 6442b51 commit f90547b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

bouncer/views.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -166,7 +166,7 @@ def goto_url(request):
166166
# append our own.
167167
url = parse.urldefrag(url)[0]
168168

169-
group = request.params.get("group", "")
169+
group = parse.quote(request.params.get("group", ""), safe="")
170170
query = parse.quote(request.params.get("q", ""))
171171

172172
# Translate any refining querystring parameters into a URL fragment

0 commit comments

Comments
 (0)