Reject ASCII control characters in cookie auth return URLs#66876

Merged

rokonec merged 3 commits into

dotnet:mainfrom

rokonec:rokonec/cookie-ishostrelative-control-chars

Jun 23, 2026

Azure Pipelines / aspnetcore-quarantined-pr (Tests: Ubuntu x64) succeeded Jun 9, 2026 in 16m 34s

Tests: Ubuntu x64 succeeded with issues

0 errors / 4 warnings

View more details on Azure Pipelines