wp_safe_redirect() case sensitive for hostnames

[BoltClock]

For instance, when I enter a post password, no matter whether it was correct, I get redirected to my wp-admin folder instead of the form's page. I had set my hostname to contain uppercase letters as an experiment.

Exploring the source code made it apparent that the check in wp_safe_redirect() is case sensitive, i.e. hostname ​http://www.EXAMPLE.com does not match ​http://www.example.com.

[markjaquith]

5114.2.diff adds a strtolower()'d version of the host into the allowed_hosts array. So you can match by being lowercase or by matching exactly. Milestone of 2.4 before 2.3.1

[markjaquith]

5114.3.diff only does the strtolower() if the raw version doesn't match.

[markjaquith]

(In [6219]) check for a match against a lowercase host in wp_safe_redirect(). props BoltClock. fixes #5114 for trunk

[markjaquith]

(In [6220]) check for a match against a lowercase host in wp_safe_redirect(). props BoltClock. fixes #5114 for 2.3.1

[jorbin]

In 36445:

Revert [35792]

This causes a regression and causes redirects to potentially fail.

See #5114 #34028
props ocean90