fix: encode redirect query parameter in js

obiba · Jun 2, 2024 · f4fe7d6 · f4fe7d6
1 parent ed9a577
commit f4fe7d6
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/agate-webapp/src/main/webapp/assets/js/agate.js b/agate-webapp/src/main/webapp/assets/js/agate.js
@@ -39,7 +39,7 @@ var agatejs = (function() {
           const q = new URLSearchParams(window.location.search);
           if (q.get('redirect')) {
             // verify redirect
-            redirect = normalizeUrl('/check?redirect=') + q.get('redirect');
+            redirect = normalizeUrl('/check?redirect=') + encodeURIComponent(q.get('redirect'));
           }
           window.location = redirect;
         })
@@ -106,7 +106,7 @@ var agatejs = (function() {
             let values = {};
             const q = new URLSearchParams(window.location.search);
             if (q.get('redirect')) {
-              redirect = normalizeUrl('/check?redirect=') + q.get('redirect');
+              redirect = normalizeUrl('/check?redirect=') + encodeURIComponent(q.get('redirect'));
               window.location = redirect;
             } else if (realmField) {
               redirect = normalizeUrl('/just-registered');
@@ -201,7 +201,7 @@ var agatejs = (function() {
             let redirect = normalizeUrl('/');
             const q = new URLSearchParams(window.location.search);
             if (q.get('redirect')) {
-              redirect = normalizeUrl('/check?redirect=') + q.get('redirect');
+              redirect = normalizeUrl('/check?redirect=') + encodeURIComponent(q.get('redirect'));
             }
             window.location = redirect;
           })