Changeset 3926

Timestamp:

06/27/2006 01:42:52 AM (19 years ago)

Author:

ryan

Message:

More thorough URI sanitizer in wp_redirect().

File:

• trunk/wp-includes/pluggable.php (modified) (1 diff)

trunk/wp-includes/pluggable.php

@@ -284 +284 @@
     global $is_IIS;
 
-    $location = str_replace( array("\n", "\r"), '', $location);
+    $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $location);
 
     if ($is_IIS)