hook_drupal_goto_alter() is being used to alter URLs during redirects to turn HTTPS on/off. But it isn't checking for redirects to external URLs, which could cause problems.

Attached patch solves the issue.

CommentFileSizeAuthor
#1 securepages-external-urls-altered-during-drupal_goto-redirects-2413291.patch900 bytesbrunascle
Support from Acquia helps fund testing for Drupal Acquia logo

Comments

brunascle’s picture

brunascle CreditAttribution: brunascle commented
Issue summary: View changes
Status: Active » Needs review
FileSize
securepages-external-urls-altered-during-drupal_goto-redirects-2413291.patch900 bytes
elsteff1385’s picture

elsteff1385 CreditAttribution: elsteff1385 commented

subscribing.

This bug was messing up redirects to payment service providers. External https:// redirects, coming from drupal_goto(), went through Secure Pages and were directed back to http:// leading to 404 error's on several bank's payment pages.