Drupal by default does not allow redirects to external destinations that are triggered via the ?destination=target URL parameter.

This module introduces a configurable list of trusted external hosts to which redirects are permitted. Since version 1.8 the module covers every redirect issued by Drupal, including redirects triggered by the destination parameter.

Contribute

Supporting organizations: 
Full development

Project information

Releases