Ticket #24663: 24663.diff

wp-includes/http.php

@@ -339 +339 @@
  * @return mixed URL or false on failure.
  */
 function wp_http_validate_url( $url ) {
-        $url = esc_url_raw( $url, array( 'http', 'https' ) );
+        $url = wp_kses_bad_protocol( $url, array( 'http', 'https' ) );
         if ( ! $url )
                 return false;