apache/superset · error

Missing URL parameter

Error message

Missing URL parameter

What it means

Error "Missing URL parameter" thrown in apache/superset.

Source

Thrown at superset/views/redirect.py:63

    """
    Warning page for external links found in alert/report emails.

    This endpoint is publicly accessible (no authentication required)
    because email recipients may not have an active Superset session.
    """

    route_base = "/redirect"

    @expose("/")
    def redirect_warning(self) -> FlaskResponse:
        """Validate the target URL and either redirect or show the warning page."""
        if not is_feature_enabled("ALERT_REPORTS"):
            abort(404)

        target_url = request.args.get("url", "").strip()

        if not target_url:
            abort(400, description="Missing URL parameter")

        # Block dangerous schemes using urlparse for robust detection
        parsed = urlparse(target_url)
        if parsed.scheme.lower() in DANGEROUS_SCHEMES:
            logger.warning("Blocked dangerous URL scheme: %s", target_url[:80])
            abort(400, description="Invalid URL scheme")

        # Internal URLs redirect immediately
        if is_safe_redirect_url(target_url):
            return redirect(target_url)

        # External URLs: render the React warning page
        return super().render_app_template()

View on GitHub (pinned to f4587218dd)

Solutions

1. Include the required URL query parameter in the request.

When it happens

Trigger: The redirect endpoint is called without its mandatory URL parameter.

Common situations: Hitting the short-link redirect endpoint without the required URL parameter.

AI-assisted analysis of apache/superset@f4587218dd (2026-08-14). Data as JSON: /api/errors/08cdfb6cfc924685. Report an issue: GitHub.