Encode the `returnUrl` if it start with `/connect/authorize?`.

pull/17364/head
maliming 1 year ago
parent a3c2b1652e
commit a8d671fa05
No known key found for this signature in database
GPG Key ID: A646B9CB645ECEA4

@ -101,6 +101,11 @@ public class AccountEmailer : IAccountEmailer, ITransientDependency
}
}
if (returnUrl.StartsWith("/connect/authorize?", StringComparison.OrdinalIgnoreCase))
{
return HttpUtility.UrlEncode(returnUrl);
}
return returnUrl;
}
}

Loading…
Cancel
Save