26 lines
994 B
Python
26 lines
994 B
Python
responseType = "200 OK"
|
|
contentType = "text/html"
|
|
|
|
session_token = Cookies.get("session", "")
|
|
if session_token:
|
|
userManagement.logout(session_token)
|
|
|
|
responseHeaders += b"Set-Cookie: session=; Path=/; Max-Age=0; HttpOnly; SameSite=Strict\n"
|
|
|
|
returnpath = "/"
|
|
if "returnto" in argumentsDict:
|
|
candidate = urllib.parse.unquote(argumentsDict["returnto"])
|
|
resolved = os.path.realpath(script_directory + "/webroot" + candidate)
|
|
webroot_real = os.path.realpath(script_directory + "/webroot")
|
|
if resolved.startswith(webroot_real + os.sep) or resolved == webroot_real:
|
|
returnpath = candidate
|
|
|
|
url = "/?p=" + urllib.parse.quote(returnpath)
|
|
responseType = "302 Found"
|
|
responseHeaders += ("Location: " + url + "\n").encode()
|
|
responsecontent = (
|
|
"<html><head><title>Redirecting...</title>"
|
|
"<meta http-equiv=\"refresh\" content=\"0; url='" + html.escape(url) + "'\" />"
|
|
"</head><body><p><a href=\"" + html.escape(url) + "\">Redirect</a></p></body></html>"
|
|
).encode()
|