Ticket #17052: pluggable.17052.patch

pluggable.php

@@ -907 +907 @@
  * @return string redirect-sanitized URL
  **/
 function wp_sanitize_redirect($location) {
-        $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%!]|i', '', $location);
+        $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%!\[\]]|i', '', $location);
         $location = wp_kses_no_null($location);
 
         // remove %0d and %0a from location