Changeset 13878

Timestamp:

03/29/2010 04:47:17 PM (15 years ago)

Author:

ryan

Message:

Check for urls that have a scheme but no host in wp_validate_redirect().

File:

• trunk/wp-includes/pluggable.php (modified) (1 diff)

trunk/wp-includes/pluggable.php

@@ -991 +991 @@
         return $default;
 
+    // Reject if scheme is set but host is not. This catches urls like https:host.com for which parse_url does not set the host field.
+    if ( isset($lp['scheme'])  && !isset($lp['host']) )
+        return $default;
+
     $wpp = parse_url(home_url());