fix unsafe redirect with rails-6.0.0.beta1

basecamp · Jan 21, 2019 · f8c5e4f · f8c5e4f
1 parent a00d8a1
commit f8c5e4f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/controllers/google_sign_in/authorizations_controller.rb b/app/controllers/google_sign_in/authorizations_controller.rb
@@ -3,6 +3,7 @@
 class GoogleSignIn::AuthorizationsController < GoogleSignIn::BaseController
   def create
     redirect_to login_url(scope: 'openid profile email', state: state),
+      allow_other_host: true,
       flash: { proceed_to: params.require(:proceed_to), state: state }
   end