Changeset 41121 for trunk/src/wp-includes/general-template.php

Timestamp:

07/23/2017 01:05:08 AM (7 years ago)

Author:

johnbillion

Message:

Login and Registration: Correctly encode the redirect location URL when it's passed as a query parameter to the lost password URL.

Props adhun

Fixes #40728

File:

• trunk/src/wp-includes/general-template.php (modified) (1 diff)

trunk/src/wp-includes/general-template.php

@@ -493 +493 @@
     $args = array( 'action' => 'lostpassword' );
     if ( !empty($redirect) ) {
-        $args['redirect_to'] = $redirect;
+        $args['redirect_to'] = urlencode( $redirect );
     }