Changeset 47949

Timestamp:

06/10/2020 04:44:14 PM (5 years ago)

Author:

whyisjake

Message:

Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.

Props: xknow, vortfu.

File:

• trunk/src/wp-includes/pluggable.php (modified) (1 diff)

trunk/src/wp-includes/pluggable.php

@@ -1413 +1413 @@
      */
     function wp_validate_redirect( $location, $default = '' ) {
-        $location = trim( $location, " \t\n\r\0\x08\x0B" );
+        $location = wp_sanitize_redirect( trim( $location, " \t\n\r\0\x08\x0B" ) );
         // Browsers will assume 'http' is your protocol, and will obey a redirect to a URL starting with '//'.
         if ( '//' === substr( $location, 0, 2 ) ) {