Do not decode url when redirecting (#122)

cernbox · Jun 16, 2017 · 44d74a0 · 44d74a0
1 parent 50faaf1
commit 44d74a0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/private/util.php b/lib/private/util.php
@@ -1046,7 +1046,7 @@ public static function getDefaultPageUrl() {
 		// Deny the redirect if the URL contains a @
 		// This prevents unvalidated redirects like ?redirect_url=:[email protected]
 		if (isset($_REQUEST['redirect_url']) && strpos($_REQUEST['redirect_url'], '@') === false) {
-			$location = $urlGenerator->getAbsoluteURL(urldecode($_REQUEST['redirect_url']));
+			$location = $urlGenerator->getAbsoluteURL($_REQUEST['redirect_url']);
 		} else {
 			$defaultPage = \OC::$server->getAppConfig()->getValue('core', 'defaultpage');
 			if ($defaultPage) {