X-Git-Url: https://git.openstreetmap.org./rails.git/blobdiff_plain/03cde71a5ee0fcbf4aa07c94bc973f5ab2a90292..6c159b96734f81efc24f2c1410cd979b5c272819:/app/controllers/messages_controller.rb?ds=sidebyside

diff --git a/app/controllers/messages_controller.rb b/app/controllers/messages_controller.rb
index a55690951..4d054b5f2 100644
--- a/app/controllers/messages_controller.rb
+++ b/app/controllers/messages_controller.rb
@@ -120,7 +120,7 @@ class MessagesController < ApplicationController
       flash[:notice] = t ".destroyed"
 
       if params[:referer]
-        redirect_to params[:referer]
+        redirect_to safe_referer(params[:referer])
       else
         redirect_to :action => :inbox
       end