From c974c3f832bd2cf7e3f094cb71c1cbdc4dd96562 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Chibon Date: Apr 21 2015 10:55:54 +0000 Subject: If the user does not provide the CSRF, redirect to the pull-request page --- diff --git a/pagure/ui/fork.py b/pagure/ui/fork.py index a6a99bd..9815f7b 100644 --- a/pagure/ui/fork.py +++ b/pagure/ui/fork.py @@ -413,7 +413,8 @@ def merge_request_pull(repo, requestid, username=None): form = pagure.forms.ConfirmationForm() if not form.validate_on_submit(): flask.flash('Invalid input submitted', 'error') - return flask.redirect(flask.url_for('view_repo', repo=repo.name)) + return flask.redirect(flask.url_for( + 'request_pull', repo=repo, requestid=requestid, username=username)) repo = pagure.lib.get_project(SESSION, repo, user=username)