Merge pull request #17364 from abpframework/AccountEmailer

Encode the `returnUrl` if it start with `/connect/authorize?`.
pull/17368/head
liangshiwei 2 years ago committed by GitHub
commit 787e222996
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -101,6 +101,11 @@ public class AccountEmailer : IAccountEmailer, ITransientDependency
}
}
if (returnUrl.StartsWith("/connect/authorize?", StringComparison.OrdinalIgnoreCase))
{
return HttpUtility.UrlEncode(returnUrl);
}
return returnUrl;
}
}

Loading…
Cancel
Save