Throw exception if URL does not include context path when context relative

Issue: gh-8399

Author: yoshikawaa

web/src/main/java/org/springframework/security/web/DefaultRedirectStrategy.java

@@ -74,7 +74,7 @@ protected String calculateRedirectUrl(String contextPath, String url) {
 		}
 
 		if (!url.contains(contextPath)) {
-			return "";
+			throw new IllegalArgumentException("The fully qualified URL does not include context path.");
 		}
 
 		// Calculate the relative URL from the fully qualified URL, minus the last

web/src/test/java/org/springframework/security/web/DefaultRedirectStrategyTests.java

@@ -57,8 +57,8 @@ public void contextRelativeUrlWithMultipleSchemesInHostnameIsHandledCorrectly()
 		assertThat(response.getRedirectedUrl()).isEqualTo("remainder");
 	}
 
-	@Test
-	public void contextRelativeShouldRedirectToRootIfURLDoesNotContainContextPath()
+	@Test(expected = IllegalArgumentException.class)
+	public void contextRelativeShouldThrowExceptionIfURLDoesNotContainContextPath()
 		throws Exception {
 		DefaultRedirectStrategy rds = new DefaultRedirectStrategy();
 		rds.setContextRelative(true);
@@ -68,7 +68,5 @@ public void contextRelativeShouldRedirectToRootIfURLDoesNotContainContextPath()
 
 		rds.sendRedirect(request, response,
 			"https://redirectme.somewhere.else");
-
-		assertThat(response.getRedirectedUrl()).isEqualTo("");
 	}
 }