Improve HTTP redirect URL encoding.

core/src/main/java/org/acegisecurity/securechannel/RetryWithHttpEntryPoint.java

@@ -117,6 +117,7 @@ public class RetryWithHttpEntryPoint implements InitializingBean,
             logger.debug("Redirecting to: " + redirectUrl);
         }
 
-        ((HttpServletResponse) response).sendRedirect(redirectUrl);
+        ((HttpServletResponse) response).sendRedirect(((HttpServletResponse) response)
+            .encodeRedirectURL(redirectUrl));
     }
 }

core/src/main/java/org/acegisecurity/securechannel/RetryWithHttpsEntryPoint.java

@@ -117,6 +117,7 @@ public class RetryWithHttpsEntryPoint implements InitializingBean,
             logger.debug("Redirecting to: " + redirectUrl);
         }
 
-        ((HttpServletResponse) response).sendRedirect(redirectUrl);
+        ((HttpServletResponse) response).sendRedirect(((HttpServletResponse) response)
+            .encodeRedirectURL(redirectUrl));
     }
 }

core/src/main/java/org/acegisecurity/ui/AbstractProcessingFilter.java

@@ -224,8 +224,8 @@ public abstract class AbstractProcessingFilter implements Filter,
                     failed);
                 httpRequest.getSession().setAttribute(HttpSessionIntegrationFilter.ACEGI_SECURITY_AUTHENTICATION_KEY,
                     null);
-                httpResponse.sendRedirect(httpRequest.getContextPath()
+                httpResponse.sendRedirect(httpResponse.encodeRedirectURL(httpRequest
-                    + authenticationFailureUrl);
+                        .getContextPath() + authenticationFailureUrl));
 
                 return;
             }
@@ -252,7 +252,7 @@ public abstract class AbstractProcessingFilter implements Filter,
                     + targetUrl);
             }
 
-            httpResponse.sendRedirect(targetUrl);
+            httpResponse.sendRedirect(httpResponse.encodeRedirectURL(targetUrl));
 
             return;
         }

core/src/main/java/org/acegisecurity/ui/webapp/AuthenticationProcessingFilterEntryPoint.java

@@ -176,6 +176,7 @@ public class AuthenticationProcessingFilterEntryPoint
             logger.debug("Redirecting to: " + redirectUrl);
         }
 
-        ((HttpServletResponse) response).sendRedirect(redirectUrl);
+        ((HttpServletResponse) response).sendRedirect(((HttpServletResponse) response)
+            .encodeRedirectURL(redirectUrl));
     }
 }

core/src/test/java/org/acegisecurity/MockHttpServletResponse.java

@@ -146,7 +146,7 @@ public class MockHttpServletResponse implements HttpServletResponse {
     }
 
     public String encodeRedirectURL(String arg0) {
-        throw new UnsupportedOperationException("mock method not implemented");
+        return arg0;
     }
 
     public String encodeRedirectUrl(String arg0) {