zotan/AutheliaMultiDomainProxy
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Don't double encode tgt

Browse source
This commit is contained in:
Laura Hausmann 2023-04-05 20:23:32 +02:00
parent 8c92bce3d9
commit 5ff4726f43
Signed by: zotan
GPG key ID: D044E84C5BE01605
1 changed files with 1 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
Controllers/RedirectController.cs
View file

@ -19,9 +19,8 @@ public class RedirectController : Controller {
return BadRequest("Bad request.");
}
// tgt is urlencoded twice because authelia decodes it by one layer
var targetUrl =
$"https://{Vars.AuthProxySubdomain}.{dstDomain}/api/cookieproxy_stage_one?tgt={HttpUtility.UrlEncode(HttpUtility.UrlEncode(tgt))}";
$"https://{Vars.AuthProxySubdomain}.{dstDomain}/api/cookieproxy_stage_one?tgt={HttpUtility.UrlEncode(tgt)}";
Response.Redirect(targetUrl);
return Content($"Redirecting... <a href=\"{targetUrl}\">Click here if you are not redirected automatically</a>", "text/html");
}