auth.py 文件源码

def get_redirect_target(clear=True) -> str:
    if clear:
        session_target = session.pop('next', None)
    else:
        session_target = session.get('next')

    for target in request.values.get('next'), session_target:
        if not target:
            continue
        if is_safe_url(target):
            return target