--- loncom/auth/lonauth.pm	2022/02/27 01:43:13	1.172
+++ loncom/auth/lonauth.pm	2022/05/21 05:16:43	1.173
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # User Authentication Module
 #
-# $Id: lonauth.pm,v 1.172 2022/02/27 01:43:13 raeburn Exp $
+# $Id: lonauth.pm,v 1.173 2022/05/21 05:16:43 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -248,6 +248,7 @@ sub success {
         if ($env{'request.lti.target'} eq '') {
             my $ltitarget = (($destination =~ /\?/) ? '&' : '?').
                             'ltitarget=iframe';
+            &js_escape(\$destination);
             $js = <<"ENDJS";
 
 <script type="text/javascript">