Ticket #16909: 16909.3.patch

wp-includes/functions.php

@@ -1961 +1961 @@
  * @return string Referer field.
  */
 function wp_referer_field( $echo = true ) {
-        $ref = esc_attr( $_SERVER['REQUEST_URI'] );
+        $url = ( is_ssl() ? 'https://' : 'http://' ) . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
+        $ref = esc_attr( $url );
         $referer_field = '<input type="hidden" name="_wp_http_referer" value="'. $ref . '" />';
 
         if ( $echo )