Changeset 23570 for trunk/wp-includes/functions.php

Timestamp:

03/01/2013 05:20:32 PM (12 years ago)

Author:

ryan

Message:

Always wp_unslash() the return of wp_get_referer().

see #21767

File:

• trunk/wp-includes/functions.php (modified) (1 diff)

trunk/wp-includes/functions.php

@@ -1284 +1284 @@
 
     if ( $ref && $ref !== $_SERVER['REQUEST_URI'] )
-        return $ref;
+        return wp_unslash( $ref );
     return false;
 }