Explicitly allow redirects to other hosts

mvz · mvz · commit 71616706b484 · 2025-09-14T10:42:20.000+02:00
diff --git a/app/controllers/articles_controller.rb b/app/controllers/articles_controller.rb
@@ -98,7 +98,7 @@ def redirect
     r = Redirect.find_by!(from_path: from)
     # TODO: If linked to article, directly redirect to the article.
     # Let redirection made outside of the blog on purpose (deal with it, Brakeman!)
-    redirect_to r.full_to_path, status: :moved_permanently if r
+    redirect_to r.full_to_path, allow_other_host: true, status: :moved_permanently if r
   end
 
   def archives
