Index: openacs-4/packages/bug-tracker/www/prefs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/bug-tracker/www/prefs.tcl,v
diff -u -N -r1.12 -r1.13
--- openacs-4/packages/bug-tracker/www/prefs.tcl	18 Sep 2013 14:17:03 -0000	1.12
+++ openacs-4/packages/bug-tracker/www/prefs.tcl	29 May 2016 10:50:02 -0000	1.13
@@ -6,7 +6,14 @@
     @creation-date March 28, 2002
     @cvs-id $Id$
 } {
-    {return_url "."}
+    {return_url:trim,notnull "."}
+} -validate {
+    valid_return_url -requires return_url {
+	# actually, one should use the page filter localurl from OpenACS 5.9
+	if {[util::external_url_p $return_url]} {
+	    ad_complain "invalid return_url"
+	}
+    }
 }
 
 # User needs to be logged in here