[release/9.0] Reject ASCII control characters in cookie auth return URLs#67156

rbhanda merged 4 commits into

release/9.0dotnet/aspnetcore:release/9.0from

backport/pr-66876-to-release/9.0dotnet/aspnetcore:backport/pr-66876-to-release/9.0Copy head branch name to clipboard