fix: allow_other_host for discourse plugin redirects (#1043)

foodcoops · Mar 6, 2024 · 8836697 · 8836697
1 parent 4b7356e
commit 8836697
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/plugins/discourse/app/controllers/discourse_controller.rb b/plugins/discourse/app/controllers/discourse_controller.rb
@@ -13,7 +13,7 @@ def redirect_to_with_payload(url, payload)
     base64_payload = Base64.strict_encode64 payload.to_query
     sso = CGI.escape base64_payload
     sig = get_hmac_hex_string base64_payload
-    redirect_to "#{url}#{url.include?('?') ? '&' : '?'}sso=#{sso}&sig=#{sig}"
+    redirect_to "#{url}#{url.include?('?') ? '&' : '?'}sso=#{sso}&sig=#{sig}", allow_other_host: true
   end
 
   def parse_payload