diff options
| author | John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com> | 2020-04-10 08:50:15 +0200 |
|---|---|---|
| committer | John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com> | 2020-04-10 08:58:54 +0200 |
| commit | 6c49dc2d1f602752831901a4202a87806f7e4732 (patch) | |
| tree | 205b81a1ddd55d4ce8f72529b40b3a02687b9ff6 /core/Controller | |
| parent | b68680596d3dfec4a156a1ce3224ea9c1c8f272c (diff) | |
| download | nextcloud-server-6c49dc2d1f602752831901a4202a87806f7e4732.tar.gz nextcloud-server-6c49dc2d1f602752831901a4202a87806f7e4732.zip | |
Fix absolute redirect
Signed-off-by: John Molakvoæ (skjnldsv) <skjnldsv@protonmail.com>
Diffstat (limited to 'core/Controller')
| -rw-r--r-- | core/Controller/LoginController.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/core/Controller/LoginController.php b/core/Controller/LoginController.php index b3f7bb310ba..60fd22bd0d1 100644 --- a/core/Controller/LoginController.php +++ b/core/Controller/LoginController.php @@ -260,7 +260,7 @@ class LoginController extends Controller { private function generateRedirect(?string $redirectUrl): RedirectResponse { if ($redirectUrl !== null && $this->userSession->isLoggedIn()) { - $location = $this->urlGenerator->getAbsoluteURL(urldecode($redirectUrl)); + $location = $this->urlGenerator->getAbsoluteURL($redirectUrl); // Deny the redirect if the URL contains a @ // This prevents unvalidated redirects like ?redirect_url=:user@domain.com if (strpos($location, '@') === false) { |