31a32,33> import cgi>44,45c46,47< if not redirect_to or '//' in redirect_to or ' ' in redirect_to:< redirect_to = settings.LOGIN_REDIRECT_URL---> #if not redirect_to or '//' in redirect_to or ' ' in redirect_to:> # redirect_to = settings.LOGIN_REDIRECT_URL54a57> redirect_to = redirect_to.replace('&', '&')63a67> redirect_to = cgi.escape(redirect_to)79a84> redirect_to = cgi.escape(redirect_to)81,83c86,88< if not redirect_to or '//' in redirect_to or ' ' in redirect_to:< from django.conf import settings< redirect_to = settings.LOGIN_REDIRECT_URL---> #if not redirect_to or '//' in redirect_to or ' ' in redirect_to:> # from django.conf import settings> # redirect_to = settings.LOGIN_REDIRECT_URL89a95> redirect_to = redirect_to.replace('&', '&')