Encode `returnUrl` when sending `PasswordReset` email..

Resolve #17044
pull/17060/head
maliming 2 years ago
parent cf65655b58
commit 94d0d6a521
No known key found for this signature in database
GPG Key ID: A646B9CB645ECEA4

@ -53,7 +53,7 @@ public class AccountEmailer : IAccountEmailer, ITransientDependency
if (!returnUrl.IsNullOrEmpty())
{
link += "&returnUrl=" + NormalizeReturnUrl(returnUrl);
link += "&returnUrl=" + UrlEncoder.Default.Encode(NormalizeReturnUrl(returnUrl));
}
if (!returnUrlHash.IsNullOrEmpty())

Loading…
Cancel
Save