Make WordPress Core

Changeset 41121


Ignore:
Timestamp:
07/23/2017 01:05:08 AM (7 years ago)
Author:
johnbillion
Message:

Login and Registration: Correctly encode the redirect location URL when it's passed as a query parameter to the lost password URL.

Props adhun

Fixes #40728

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/general-template.php

    r40983 r41121  
    493493    $args = array( 'action' => 'lostpassword' );
    494494    if ( !empty($redirect) ) {
    495         $args['redirect_to'] = $redirect;
     495        $args['redirect_to'] = urlencode( $redirect );
    496496    }
    497497
Note: See TracChangeset for help on using the changeset viewer.