Encode `returnUrl` when sending `PasswordReset` email..

Resolve #17044
3 years ago · 94d0d6a521
1 changed files with 1 additions and 1 deletions
--- a/modules/account/src/Volo.Abp.Account.Application/Volo/Abp/Account/Emailing/AccountEmailer.cs
+++ b/modules/account/src/Volo.Abp.Account.Application/Volo/Abp/Account/Emailing/AccountEmailer.cs
@ -53,7 +53,7 @@ public class AccountEmailer : IAccountEmailer, ITransientDependency

        if (!returnUrl.IsNullOrEmpty())
        {
-            link += "&returnUrl=" + NormalizeReturnUrl(returnUrl);
+            link += "&returnUrl=" + UrlEncoder.Default.Encode(NormalizeReturnUrl(returnUrl));
        }

        if (!returnUrlHash.IsNullOrEmpty())