diff --git a/ihatemoney/tests/budget_test.py b/ihatemoney/tests/budget_test.py
index b4ec2c24..7c6c55d8 100644
--- a/ihatemoney/tests/budget_test.py
+++ b/ihatemoney/tests/budget_test.py
@@ -1,7 +1,7 @@
 from collections import defaultdict
 import datetime
 import re
-from urllib.parse import urlparse, urlunparse
+from urllib.parse import unquote, urlparse, urlunparse
 
 from flask import session, url_for
 from libfaketime import fake_time
@@ -587,7 +587,7 @@ class TestBudget(IhatemoneyTestCase):
 
         # test the redirection to the authentication page when trying to access admin endpoints
         resp = self.client.get("/create")
-        assert '<a href="/admin?goto=%2Fcreate">' in resp.data.decode("utf-8")
+        assert "/admin?goto=/create" in unquote(resp.location)
 
         # test right password
         resp = self.client.post(
diff --git a/setup.cfg b/setup.cfg
index be80ae08..bc0f8bb2 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -38,8 +38,8 @@ install_requires =
     Flask-Talisman>=0.8,<2
     Flask-WTF>=0.14.3,<2
     WTForms>=2.3.1,<3.1
-    Flask>=2,<2.3
-    Werkzeug>=2,<2.3
+    Flask>=2,<3
+    Werkzeug>=2,<3
     itsdangerous>=2,<3
     Jinja2>=3,<4
     qrcode>=7.1,<8