rsingh85

private bool IsValidReturnUrl(string returnUrl, HostString host)
{
    if (Uri.TryCreate(returnUrl, UriKind.RelativeOrAbsolute, out var uri))
    {
        // Check if the URL is absolute and has the same host as the current request.
        if (uri.IsAbsoluteUri && uri.Host.Equals(host.Host, StringComparison.OrdinalIgnoreCase))
        {
            return true;
        }