always right-trim the route for safety

Signed-off-by: Andy Miller <rhuk@mac.com>
This commit is contained in:
Andy Miller
2020-06-09 10:37:57 -06:00
parent 7af383b556
commit 19e2dced4e

View File

@@ -16,7 +16,7 @@
{% set redirect = redirect ?: uri.path ~ uri.params ~ (uri.query ? '?' ~ uri.query : '') %}
<form method="post" action="{{ admin_route('/') }}">
<form method="post" action="{{ admin_route('/')|trim('/', 'right') }}">
<div class="padding">
{% block form %}{% endblock %}
<input type="hidden" name="redirect" value="{{ redirect }}" />