DisallowedRedirect(不安全的重定向到带协议的URL)Django

Question

我在登录用户时收到DisallowedRedirect错误两个视图都是

def login(request):
    c={}
    c.update(csrf(request))
    form=LoginForm()
    errors=()
    c['form']=form
    c['errors']=errors
    return render(request,'news/login.html',c)

def auth_view(request):
    username=request.POST.get('username','')
    password=request.POST.get('password','')
    user=auth.authenticate(username=username,password=password)
    if user is not None:
        auth.login(request,user)
        return HttpResponseRedirect('news:home',request)
    else:
        form=LoginForm()
        errors=('Invalid Username or Password',)
        return render(request,'news/login.html', {'form':form,'errors':errors})

Answer 1

代替

return HttpResponseRedirect('news:home',request)

这个:

return HttpResponseRedirect(reverse('news:home'))

要么

return redirect('news:home')

要么

return redirect(reverse('news:home'))

Answer 2

HttpResponseRedirect.allowed_schemes.append('新闻')

Answer 3

除了当前答案之外，如果您想重定向到自定义方案，您还可以使用以下代码：

class CustomSchemeRedirect(HttpResponsePermanentRedirect):
    allowed_schemes = ['tg']


def redirect(request):
    return CustomSchemeRedirect('tg://resolve?domain=durov')