[5.x] Escape redirect in user tag (#11999)

Author: jasonvarga

src/Tags/Concerns/RendersForms.php

@@ -104,7 +104,7 @@ protected function formMetaFields($meta)
     {
         return collect($meta)
             ->map(function ($value, $key) {
-                return sprintf('<input type="hidden" name="_%s" value="%s" />', $key, $value);
+                return sprintf('<input type="hidden" name="_%s" value="%s" />', $key, e($value));
             })
             ->implode("\n");
     }