Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
Props: xknow, vortfu. Built from https://develop.svn.wordpress.org/trunk@47949 git-svn-id: http://core.svn.wordpress.org/trunk@47721 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
@@ -1412,7 +1412,7 @@ if ( ! function_exists( 'wp_validate_redirect' ) ) :
|
||||
* @return string redirect-sanitized URL
|
||||
*/
|
||||
function wp_validate_redirect( $location, $default = '' ) {
|
||||
$location = trim( $location, " \t\n\r\0\x08\x0B" );
|
||||
$location = wp_sanitize_redirect( trim( $location, " \t\n\r\0\x08\x0B" ) );
|
||||
// Browsers will assume 'http' is your protocol, and will obey a redirect to a URL starting with '//'.
|
||||
if ( '//' === substr( $location, 0, 2 ) ) {
|
||||
$location = 'http:' . $location;
|
||||
|
||||
Reference in New Issue
Block a user