Make WordPress Core


Ignore:
Timestamp:
03/01/2013 05:20:32 PM (14 years ago)
Author:
ryan
Message:

Always wp_unslash() the return of wp_get_referer().

see #21767

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/upgrade.php

    r23567 r23570  
    7878switch ( $step ) :
    7979        case 0:
    80                 $goback = wp_unslash( wp_get_referer() );
     80                $goback = wp_get_referer();
    8181                $goback = esc_url_raw( $goback );
    8282                $goback = urlencode( $goback );
Note: See TracChangeset for help on using the changeset viewer.