Make permission denied redirects host relative.

This helps fix infinite redirect loops when HTTP_X_FORWARDED_HOST is
set, and fixes redirects back to external domains on authentication
errors.

Fixes #3207
This commit is contained in:
mark_story 2012-09-14 09:39:45 -04:00
parent d33f676ddd
commit 0282194c20

View file

@ -332,7 +332,7 @@ class AuthComponent extends Component {
if (!empty($this->loginRedirect)) {
$default = $this->loginRedirect;
}
$controller->redirect($controller->referer($default), null, true);
$controller->redirect($controller->referer($default, true), null, true);
return false;
}