Changeset 54522

Timestamp:

10/17/2022 11:02:06 AM (2 years ago)

Author:

audrasjb

Message:

General: Validate host on "Are you sure?" screen.

Props voldemortensen, xknown, peterwiloncc.

File:

• trunk/src/wp-includes/functions.php (modified) (1 diff)

trunk/src/wp-includes/functions.php

@@ -3585 +3585 @@
         $html = __( 'The link you followed has expired.' );
         if ( wp_get_referer() ) {
+            $wp_http_referer = remove_query_arg( 'updated', wp_get_referer() );
+            $wp_http_referer = wp_validate_redirect( esc_url_raw( $wp_http_referer ) );
             $html .= '</p><p>';
             $html .= sprintf(
                 '<a href="%s">%s</a>',
-                esc_url( remove_query_arg( 'updated', wp_get_referer() ) ),
+                esc_url( $wp_http_referer ),
                 __( 'Please try again.' )
             );