Browse Source
Merge pull request #12656 from abpframework/maliming/ReturnUrl
Check `ReturnUrl` not null.
pull/12657/head
liangshiwei
4 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with
7 additions and
4 deletions
-
modules/account/src/Volo.Abp.Account.Web/Pages/Account/Manage.cshtml.cs
|
|
|
@ -34,11 +34,14 @@ public class ManageModel : AccountPageModel |
|
|
|
await contributor.ConfigureAsync(ProfileManagementPageCreationContext); |
|
|
|
} |
|
|
|
|
|
|
|
if (!Url.IsLocalUrl(ReturnUrl) && |
|
|
|
!ReturnUrl.StartsWith(UriHelper.BuildAbsolute(Request.Scheme, Request.Host, Request.PathBase).RemovePostFix("/")) && |
|
|
|
!AppUrlProvider.IsRedirectAllowedUrl(ReturnUrl)) |
|
|
|
if (ReturnUrl != null) |
|
|
|
{ |
|
|
|
ReturnUrl = null; |
|
|
|
if (!Url.IsLocalUrl(ReturnUrl) && |
|
|
|
!ReturnUrl.StartsWith(UriHelper.BuildAbsolute(Request.Scheme, Request.Host, Request.PathBase).RemovePostFix("/")) && |
|
|
|
!AppUrlProvider.IsRedirectAllowedUrl(ReturnUrl)) |
|
|
|
{ |
|
|
|
ReturnUrl = null; |
|
|
|
} |
|
|
|
} |
|
|
|
|
|
|
|
return Page(); |
|
|
|
|