--- a/pylib/mozreview/mozreview/views.py
+++ b/pylib/mozreview/mozreview/views.py
@@ -90,23 +90,23 @@ def get_bmo_auth_callback(request):
     callback_result = request.GET.get('callback_result', None)
     redirect = request.GET.get('redirect', None)
 
     if not (bmo_username and callback_result):
         logger.error('Bugzilla auth callback called without required '
                      'parameters.')
         return show_error_page(request)
 
-    parsed = urlparse.urlparse(redirect)
+    parsed = None if not redirect else urlparse.urlparse(redirect)
 
     # Enforce relative redirects; we don't want people crafting auth links
     # that redirect to other sites.  We check the scheme as well as the netloc
     # to catch data, file, and other such server-less URIs.
 
-    if parsed.scheme or parsed.netloc:
+    if not parsed or parsed.scheme or parsed.netloc:
         redirect = '/'
 
     unverified_keys = UnverifiedBugzillaApiKey.objects.filter(
         bmo_username=bmo_username).order_by('timestamp')
 
     if not unverified_keys:
         logger.error('No unverified keys found for BMO user %s.' %
                      bmo_username)