31a32,33 > import cgi > 44,45c46,47 < if not redirect_to or '//' in redirect_to or ' ' in redirect_to: < redirect_to = settings.LOGIN_REDIRECT_URL --- > #if not redirect_to or '//' in redirect_to or ' ' in redirect_to: > # redirect_to = settings.LOGIN_REDIRECT_URL 54a57 > redirect_to = redirect_to.replace('&', '&') 63a67 > redirect_to = cgi.escape(redirect_to) 79a84 > redirect_to = cgi.escape(redirect_to) 81,83c86,88 < if not redirect_to or '//' in redirect_to or ' ' in redirect_to: < from django.conf import settings < redirect_to = settings.LOGIN_REDIRECT_URL --- > #if not redirect_to or '//' in redirect_to or ' ' in redirect_to: > # from django.conf import settings > # redirect_to = settings.LOGIN_REDIRECT_URL 89a95 > redirect_to = redirect_to.replace('&', '&')