diff --git a/app/login/controllers/login-controller.js b/app/login/controllers/login-controller.js
index 350429b..cc0f0b3 100644
--- a/app/login/controllers/login-controller.js
+++ b/app/login/controllers/login-controller.js
@@ -42,7 +42,7 @@
               var next = $location.search().next;
               // don't allow forwarding to non-local urls
               if (next === undefined || next == null ||
-                  next.indexOf('//') >= 0) {
+                  next.indexOf(':') >= 0) {
                 $window.location.hash = '#/overview/server';
               } else {
                 $window.location.href = next;