Index: openacs-4/packages/bug-tracker/www/bug-add.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/bug-tracker/www/bug-add.tcl,v
diff -u -N -r1.19 -r1.20
--- openacs-4/packages/bug-tracker/www/bug-add.tcl	14 Oct 2013 18:14:22 -0000	1.19
+++ openacs-4/packages/bug-tracker/www/bug-add.tcl	29 May 2016 10:50:02 -0000	1.20
@@ -5,13 +5,16 @@
     @creation-date 2002-03-25
     @cvs-id $Id$
 } {
-    {return_url ""}
+    {return_url:trim,notnull "."}
+} -validate {
+    valid_return_url -requires return_url {
+	# actually, one should use the page filter localurl from OpenACS 5.9
+	if {[util::external_url_p $return_url]} {
+	    ad_complain "invalid return_url"
+	}
+    }
 }
 
-if { $return_url eq "" } {
-    set return_url "."
-}
-
 permission::require_permission -object_id [ad_conn package_id] -privilege create
 
 # User needs to be logged in here