Files
2020-01-21 15:45:05 +01:00

19 lines
353 B
Python

from flask import Flask, request, redirect
app = Flask(__name__)
@app.route('/')
def hello():
target = request.args.get('target', '')
return redirect(target, code=302)
#Check for safe prefixes
@app.route('/ok')
def ok():
untrusted = request.args.get('ok', '')
safe = "safe"
safe += untrusted
return redirect(safe, code=302)