Encode credentials during login (#6163)

This commit is contained in:
WithoutPants
2025-10-21 19:04:44 +11:00
committed by GitHub
parent a6778d7d22
commit 71e4071871

View File

@@ -44,7 +44,8 @@
xhr.onerror = function() {
document.getElementsByClassName("login-error")[0].innerHTML = localeStrings.internal_error;
};
xhr.send("username=" + username + "&password=" + password + "&returnURL=" + returnURL);
var body = "username=" + encodeURIComponent(username) + "&password=" + encodeURIComponent(password) + "&returnURL=" + encodeURIComponent(returnURL);
xhr.send(body);
}
</script>