backslashes should be ok

Gee19 · Gee19 · commit 49bee5e44f90 · 2022-11-30T18:00:03.000-05:00
diff --git a/djangosaml2/utils.py b/djangosaml2/utils.py
@@ -110,7 +110,8 @@ def validate_referral_url(request, url):
 
     if not url_has_allowed_host_and_scheme(url=url, allowed_hosts=saml_allowed_hosts):
         return get_fallback_login_redirect_url()
-    return urllib.parse.quote(url, safe="")
+
+    return urllib.parse.quote(url, safe="/")
 
 
 def saml2_from_httpredirect_request(url):
