diff --git a/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java b/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java index e8582cd17b..fdfeef886d 100644 --- a/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java +++ b/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java @@ -83,7 +83,11 @@ public abstract class AbstractAuthenticationTargetUrlRequestHandler { } // Check for the parameter and use that if available - String targetUrl = request.getParameter(targetUrlParameter); + String targetUrl = null; + + if (targetUrlParameter != null) { + targetUrl = request.getParameter(targetUrlParameter); + } if (StringUtils.hasText(targetUrl)) { try {