Ticket #18818: 18818.diff

wp-includes/pluggable.php

@@ -877 +877 @@
  * @return string redirect-sanitized URL
  **/
 function wp_sanitize_redirect($location) {
-        $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%!]|i', '', $location);
+        $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%!@]|i', '', $location);
         $location = wp_kses_no_null($location);
 
         // remove %0d and %0a from location