symfony
diff --git a/‎Controller/RedirectController.php
Copy file name to clipboardExpand all lines: Controller/RedirectController.php
+6-2Lines changed: 6 additions & 2 deletions b/‎Controller/RedirectController.php
Copy file name to clipboardExpand all lines: Controller/RedirectController.php
+6-2Lines changed: 6 additions & 2 deletions
diff --git a/‎Tests/Controller/RedirectControllerTest.php
Copy file name to clipboardExpand all lines: Tests/Controller/RedirectControllerTest.php
+14Lines changed: 14 additions & 0 deletions b/‎Tests/Controller/RedirectControllerTest.php
Copy file name to clipboardExpand all lines: Tests/Controller/RedirectControllerTest.php
+14Lines changed: 14 additions & 0 deletions
@@ -115,13 +115,17 @@ public function urlRedirectAction(Request $request, string $path, bool $permanen
             $statusCode = $permanent ? 301 : 302;
         }
 
+        $scheme ??= $request->getScheme();
+
+        if (str_starts_with($path, '//')) {
+            $path = $scheme.':'.$path;
+        }
+
         // redirect if the path is a full URL
         if (parse_url($path, \PHP_URL_SCHEME)) {
             return new RedirectResponse($path, $statusCode);
         }
 
-        $scheme ??= $request->getScheme();
-
         if ($qs = $request->server->get('QUERY_STRING') ?: $request->getQueryString()) {
             if (!str_contains($path, '?')) {
                 $qs = '?'.$qs;
 
@@ -183,6 +183,20 @@ public function testFullURLWithMethodKeep()
         $this->assertEquals(307, $returnResponse->getStatusCode());
     }
 
+    public function testProtocolRelative()
+    {
+        $request = new Request();
+        $controller = new RedirectController();
+
+        $returnResponse = $controller->urlRedirectAction($request, '//foo.bar/');
+        $this->assertRedirectUrl($returnResponse, 'http://foo.bar/');
+        $this->assertSame(302, $returnResponse->getStatusCode());
+
+        $returnResponse = $controller->urlRedirectAction($request, '//foo.bar/', false, 'https');
+        $this->assertRedirectUrl($returnResponse, 'https://foo.bar/');
+        $this->assertSame(302, $returnResponse->getStatusCode());
+    }
+
     public function testUrlRedirectDefaultPorts()
     {
         $host = 'www.example.com';