Ticket #16907: 16907.patch

wp-admin/theme-editor.php

@@ -93 +93 @@
                 $location = "theme-editor.php?file=$file&theme=$theme&scrollto=$scrollto";
         }
 
-        $location = wp_kses_no_null($location);
-        $strip = array('%0d', '%0a', '%0D', '%0A');
-        $location = _deep_replace($strip, $location);
-        header("Location: $location");
+        wp_redirect( $location );
         exit();
 
 break;

wp-includes/ms-settings.php

@@ -91 +91 @@
                 } else {
                         $destination = 'http://' . $current_site->domain . $current_site->path . 'wp-signup.php?new=' . str_replace( '.' . $current_site->domain, '', $domain );
                 }
-                header( 'Location: ' . $destination );
-                die();
+                wp_redirect( $destination );
+                exit;
         }
 
         if ( ! defined( 'WP_INSTALLING' ) ) {
                 if ( $current_site && ! $current_blog ) {
                         if ( $current_site->domain != $_SERVER[ 'HTTP_HOST' ] ) {
-                                header( 'Location: http://' . $current_site->domain . $current_site->path );
+                                wp_redirect( 'http://' . $current_site->domain . $current_site->path );
                                 exit;
                         }
                         $current_blog = get_blog_details( array( 'domain' => $current_site->domain, 'path' => $current_site->path ), false );