Add comments to CookieAuthenticationHandler

This commit is contained in:
Troy Dai 2016-08-11 14:03:17 -07:00
parent 26a7c7016d
commit fb0a577dd1
1 changed files with 3 additions and 0 deletions

View File

@ -316,6 +316,9 @@ namespace Microsoft.AspNetCore.Authentication.Cookies
// set redirect uri in order:
// 1. properties.RedirectUri
// 2. query parameter ReturnUrlParameter
//
// Absolute uri is not allowed if it is from query string as query string is not
// a trusted source.
var redirectUri = properties.RedirectUri;
if (string.IsNullOrEmpty(redirectUri))
{