Encode `returnUrl` when sending `PasswordReset` email..

Resolve #17044
pull/17060/head
maliming 2 years ago
parent cf65655b58
commit 94d0d6a521
No known key found for this signature in database
GPG Key ID: A646B9CB645ECEA4

@ -53,7 +53,7 @@ public class AccountEmailer : IAccountEmailer, ITransientDependency
if (!returnUrl.IsNullOrEmpty()) if (!returnUrl.IsNullOrEmpty())
{ {
link += "&returnUrl=" + NormalizeReturnUrl(returnUrl); link += "&returnUrl=" + UrlEncoder.Default.Encode(NormalizeReturnUrl(returnUrl));
} }
if (!returnUrlHash.IsNullOrEmpty()) if (!returnUrlHash.IsNullOrEmpty())

Loading…
Cancel
Save