[5.x] Sanitize password reset form redirect value (#14327)

Author: jasonvarga

src/Auth/UserTags.php

@@ -444,7 +444,7 @@ public function resetPasswordForm()
         $html .= '<input type="hidden" name="token" value="'.$token.'" />';
 
         if ($redirect) {
-            $html .= '<input type="hidden" name="redirect" value="'.$redirect.'" />';
+            $html .= '<input type="hidden" name="redirect" value="'.e($redirect).'" />';
         }
 
         $html .= $this->parse($data);