Fix broken RSS links

[bmispelon]

Fixes #204

[medmunds]

This is clever! (Sometimes it really is better to fix the symptom than the cause.)

Is there already a test to ensure "referer" can't be used as an open redirect exploit?

[bmispelon]

Is there already a test to ensure "referer" can't be used as an open redirect exploit?

Very good question, thanks for thinking about that. We do have a test that should cover everything:

code.djangoproject.com/DjangoPlugin/tracdjangoplugin/tests.py

Line 89 in 82c7535

def test_login_valid_with_malicious_redirection(self):

If you can think of a corner-case that's not covered by that test, please send a PR (⚠️ unless you find a case where our site is vulnerable, in which case please email [email protected] instead)

[bmispelon]

(the fix should be live, let me know how it goes)

[medmunds]

Much better. Thanks!