Drupal by default does not allow redirects to external destinations that are triggered via the ?destination=target URL parameter.
This module introduces a configurable list of trusted external hosts to which redirects are permitted. Since version 1.8 the module covers every redirect issued by Drupal, including redirects triggered by the destination parameter.
Contribute
- Reach out at #drunomics-contribute at the Drupal Slack!
Supporting organizations:
Full development
Project information
Maintenance fixes only
Considered feature-complete by its maintainers.- Project categories: Administration tools
86 sites report using this module
- Created by hideaway on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.


