wp_kses_no_null() redirect location for extra protection.
git-svn-id: https://develop.svn.wordpress.org/trunk@3992 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
d75bc044ef
commit
6fd01856c7
|
@ -261,6 +261,7 @@ function wp_redirect($location) {
|
||||||
global $is_IIS;
|
global $is_IIS;
|
||||||
|
|
||||||
$location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%]|i', '', $location);
|
$location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%]|i', '', $location);
|
||||||
|
$location = wp_kses_no_null($location);
|
||||||
|
|
||||||
$strip = array('%0d', '%0a');
|
$strip = array('%0d', '%0a');
|
||||||
$location = str_replace($strip, '', $location);
|
$location = str_replace($strip, '', $location);
|
||||||
|
|
Loading…
Reference in New Issue