huahaofeng
/
aspnetcore
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add comments to CookieAuthenticationHandler

This commit is contained in:
Troy Dai 2016-08-11 14:03:17 -07:00
parent 26a7c7016d
commit fb0a577dd1
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/Microsoft.AspNetCore.Authentication.Cookies/CookieAuthenticationHandler.cs
View File

@ -316,6 +316,9 @@ namespace Microsoft.AspNetCore.Authentication.Cookies
// set redirect uri in order: // set redirect uri in order:
// 1. properties.RedirectUri // 1. properties.RedirectUri
// 2. query parameter ReturnUrlParameter // 2. query parameter ReturnUrlParameter
//
// Absolute uri is not allowed if it is from query string as query string is not
// a trusted source.
var redirectUri = properties.RedirectUri; var redirectUri = properties.RedirectUri;
if (string.IsNullOrEmpty(redirectUri)) if (string.IsNullOrEmpty(redirectUri))
{ {