joindin/joind.in — pull request #471 by magicmonkey (2012-02-05 16:56:29+00:00)
Title: Prevented forwarding on to anywhere except this site after login

Checking the referrer header is inside the config'd base_url