Ticket #17052: basic_auth_for_wp_redirect.diff

pluggable.php

@@ -909 +909 @@
  * @return string redirect-sanitized URL
  **/
 function wp_sanitize_redirect($location) {
-        $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%!]|i', '', $location);
+        $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%!\[\]@]|i', '', $location);
         $location = wp_kses_no_null($location);
 
         // remove %0d and %0a from location