From 5ac8ac0e6c7939ddd42fbaefd63c64f4ec2ee045 Mon Sep 17 00:00:00 2001
From: Daniel Vaz Gaspar <danielvazgaspar@gmail.com>
Date: Tue, 14 Sep 2021 11:29:05 +0100
Subject: [PATCH] fix: don't send invalid URLs back to the user (#16687)

* fix: don't send bogus URLs back to the user

* lint, remove f string
---
 superset/views/redirects.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/superset/views/redirects.py b/superset/views/redirects.py
index cb4f721b0..d5de4981c 100644
--- a/superset/views/redirects.py
+++ b/superset/views/redirects.py
@@ -66,7 +66,7 @@ class R(BaseSupersetView):  # pylint: disable=invalid-name
         url = request.form.get("data")
         if not self._validate_url(url):
             logger.warning("Invalid URL: %s", url)
-            return Response(f"Invalid URL: {url}", 400)
+            return Response("Invalid URL", 400)
         obj = models.Url(url=url)
         db.session.add(obj)
         db.session.commit()