Changeset 54532 for branches/6.0/src/wp-includes/functions.php

Timestamp:

10/17/2022 12:09:54 PM (2 years ago)

Author:

audrasjb

Message:

General: Validate host on "Are you sure?" screen.

Props voldemortensen, xknown, peterwiloncc.

Merges [54522] to the 6.0 branch.

Location:

branches/6.0

Files:

• . (modified) (1 prop)
• src/wp-includes/functions.php (modified) (1 diff)

branches/6.0/src/wp-includes/functions.php

@@ -3581 +3581 @@
         $html = __( 'The link you followed has expired.' );
         if ( wp_get_referer() ) {
+            $wp_http_referer = remove_query_arg( 'updated', wp_get_referer() );
+            $wp_http_referer = wp_validate_redirect( esc_url_raw( $wp_http_referer ) );
             $html .= '</p><p>';
             $html .= sprintf(
                 '<a href="%s">%s</a>',
-                esc_url( remove_query_arg( 'updated', wp_get_referer() ) ),
+                esc_url( $wp_http_referer ),
                 __( 'Please try again.' )
             );