This repository has been archived on 2024-05-31. You can view files and clone it, but cannot push or open issues or pull requests.
|
from urllib.parse import urljoin, urlparse
|
|
|
|
|
|
def is_safe_url(request, target):
|
|
ref_url = urlparse(request.host_url)
|
|
test_url = urlparse(urljoin(request.host_url, target))
|
|
return test_url.scheme in ('http', 'https') and \
|
|
ref_url.netloc == test_url.netloc
|