Changeset 5992 for branches/2.0/wp-includes/pluggable-functions.php

Timestamp:

08/30/2007 05:47:35 PM (19 years ago)

Author:

markjaquith

Message:

Better %0d/%0a sanitization for wp_redirect() from hakre. fixes #4819 for 2.0.12

File:

• branches/2.0/wp-includes/pluggable-functions.php (modified) (1 diff)

branches/2.0/wp-includes/pluggable-functions.php

@@ -262 +262 @@
     $location = preg_replace('|[^a-z0-9-~\+_\.\?#=&;,/:%]|i', '', $location);
 
+    // remove %0d and %0a from location
     $strip = array('%0d', '%0a');
-    $location = str_replace($strip, '', $location);
+    $found = true;
+    while($found) {
+        $found = false;
+        foreach($strip as $val) {
+            while(strpos($location, $val) !== false) {
+                $found = true;
+                $location = str_replace($val, '', $location);
+            }
+        }
+    }
 
     if ( $is_IIS ) {