red_alf wrote in changelog

[livejournal] r19070: LJSV-1367: Possible redirect vulnerabili...

Committer: afedorov
LJSV-1367: Possible redirect vulnerability

U   trunk/cgi-bin/LJ/Session.pm
Modified: trunk/cgi-bin/LJ/Session.pm
===================================================================
--- trunk/cgi-bin/LJ/Session.pm	2011-05-18 03:10:43 UTC (rev 19069)
+++ trunk/cgi-bin/LJ/Session.pm	2011-05-18 06:10:17 UTC (rev 19070)
@@ -523,7 +523,7 @@
 
     unless ($u) {
         LJ::Session->clear_master_cookie;
-        return $dest;
+        return;
     }
 
     my $domcook = LJ::Session->domain_cookie($dest) or