prevent infinite request for confirmation (plone.protect)

plone · Nov 22, 2019 · 7f7c15d · 7f7c15d
1 parent 2d6c612
commit 7f7c15d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/plone/app/discussion/browser/moderation.py b/plone/app/discussion/browser/moderation.py
@@ -228,7 +228,8 @@ def __call__(self):
         # if the referrer already has a came_from in it, don't redirect back
         if (len(came_from) == 0 or 'came_from=' in came_from or
                 not getToolByName(
-                content_object, 'portal_url').isURLInPortal(came_from)):
+                content_object, 'portal_url').isURLInPortal(came_from) or
+                '@@confirm-action' in came_from):
             came_from = content_object.absolute_url()
         return self.context.REQUEST.RESPONSE.redirect(came_from)