Encode requesttoken for logout url in auto logout

Signed-off-by: Julius Härtl <jus@bitgrid.net>
4 years ago · ca1310bd12
parent 85570abc9a
commit ca1310bd12
3 changed files with 3 additions and 3 deletions
--- a/core/js/dist/main.js
+++ b/core/js/dist/main.js
--- a/core/js/dist/main.js.map
+++ b/core/js/dist/main.js.map
--- a/core/src/session-heartbeat.js
+++ b/core/src/session-heartbeat.js
@ -126,7 +126,7 @@ const registerAutoLogout = () => {
 		const timeout = Date.now() - config.session_lifetime * 1000
 		if (lastActive < timeout) {
 			console.info('Inactivity timout reached, logging out')
-			const logoutUrl = generateUrl('/logout') + '?requesttoken=' + getRequestToken()
+			const logoutUrl = generateUrl('/logout') + '?requesttoken=' + encodeURIComponent(getRequestToken())
 			window.location = logoutUrl
 		}
 	}, 1000)