1. Create a page with a title ending in a question mark, which will have a URL
ending in %3F, and make that page require only viewable to logged-in users.
2. Log out, try to visit the page, and click the log in link on the access
denied page.
3. After logging in, you will be redirected to the URL without the trailing
%3F.
I haven't investigated further to see if other URL-encoded characters are
stripped from the end of the URL or if such entities are stripped from the
middle of the URL.
Original issue reported on code.google.com by Is...@wowzers.com on 16 Mar 2012 at 4:12
Original issue reported on code.google.com by
Is...@wowzers.com
on 16 Mar 2012 at 4:12