diff --git a/app/controllers/payment_gateways/paypal_controller.rb b/app/controllers/payment_gateways/paypal_controller.rb
index b3ba7b9957..c87599a8f9 100644
--- a/app/controllers/payment_gateways/paypal_controller.rb
+++ b/app/controllers/payment_gateways/paypal_controller.rb
@@ -24,7 +24,7 @@ module PaymentGateways
           # At this point Paypal has *provisionally* accepted that the payment can now be placed,
           # and the user will be redirected to a Paypal payment page. On completion, the user is
           # sent back and the response is handled in the #confirm action in this controller.
-          redirect_to provider.express_checkout_url(pp_response, useraction: 'commit')
+          redirect_to provider.express_checkout_url(pp_response, useraction: 'commit'), allow_other_host: true
         else
           flash[:error] =
             Spree.t(
diff --git a/app/controllers/spree/admin/payments_controller.rb b/app/controllers/spree/admin/payments_controller.rb
index 0afaa5227c..5b321a9ac2 100644
--- a/app/controllers/spree/admin/payments_controller.rb
+++ b/app/controllers/spree/admin/payments_controller.rb
@@ -63,7 +63,7 @@ module Spree
         Bugsnag.notify(e)
         flash[:error] = e.message
       ensure
-        redirect_to request.referer
+        redirect_to request.referer, allow_other_host: true
       end
 
       def paypal_refund