move decode of return_to to domain library

GoteoFoundation · Dec 4, 2024 · 6aa710c · 6aa710c
1 parent 6f9c461
commit 6aa710c
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/src/Goteo/Controller/InvestController.php b/src/Goteo/Controller/InvestController.php
@@ -101,7 +101,7 @@ private function validate(
             $return_to = '';
 
             if ($request->query->has('return_to')) {
-                $return_to = rawurldecode($request->query->get('return_to'));
+                $return_to = $request->query->get('return_to');
 
                 if (Domain::isAllowedDomain($return_to))
                     Session::store('return_to', $return_to);

diff --git a/src/Goteo/Library/Domain.php b/src/Goteo/Library/Domain.php
@@ -18,7 +18,7 @@ public static function isAllowedDomain(string $domain): bool
         if (empty($domains))
             return false;
 
-        $parse = parse_url($domain, PHP_URL_HOST);
+        $parse = parse_url(rawurldecode($domain), PHP_URL_HOST);
         if (!$parse)
             return false;