Browse Source

Merge pull request #17364 from abpframework/AccountEmailer

Encode the `returnUrl` if it start with `/connect/authorize?`.
pull/17368/head
liangshiwei 3 years ago
committed by GitHub
parent
commit
787e222996
No known key found for this signature in database GPG Key ID: 4AEE18F83AFDEB23
  1. 5
      modules/account/src/Volo.Abp.Account.Application/Volo/Abp/Account/Emailing/AccountEmailer.cs

5
modules/account/src/Volo.Abp.Account.Application/Volo/Abp/Account/Emailing/AccountEmailer.cs

@ -101,6 +101,11 @@ public class AccountEmailer : IAccountEmailer, ITransientDependency
}
}
if (returnUrl.StartsWith("/connect/authorize?", StringComparison.OrdinalIgnoreCase))
{
return HttpUtility.UrlEncode(returnUrl);
}
return returnUrl;
}
}

Loading…
Cancel
Save