Ticket #16906: 16906.patch

wp-includes/pluggable.php

@@ -908 +908 @@
  **/
 function wp_sanitize_redirect($location) {
         $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%!]|i', '', $location);
-        $location = wp_kses_no_null($location);
 
         // remove %0d and %0a from location
         $strip = array('%0d', '%0a', '%0D', '%0A');