Encode credentials during login (#6163)

This commit is contained in:
WithoutPants 2025-10-21 19:04:44 +11:00 committed by GitHub
parent a6778d7d22
commit 71e4071871
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -44,7 +44,8 @@
xhr.onerror = function() { xhr.onerror = function() {
document.getElementsByClassName("login-error")[0].innerHTML = localeStrings.internal_error; document.getElementsByClassName("login-error")[0].innerHTML = localeStrings.internal_error;
}; };
xhr.send("username=" + username + "&password=" + password + "&returnURL=" + returnURL); var body = "username=" + encodeURIComponent(username) + "&password=" + encodeURIComponent(password) + "&returnURL=" + encodeURIComponent(returnURL);
xhr.send(body);
} }
</script> </script>