More thorough URI sanitizer in wp_redirect().

git-svn-id: http://svn.automattic.com/wordpress/trunk@3926 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2006-06-27 01:42:52 +00:00 · 2006-06-27 01:42:52 +00:00 · 9b8a99e398
parent e92ccf5685
commit 9b8a99e398
1 changed files with 1 additions and 1 deletions
--- a/wp-includes/pluggable.php
+++ b/wp-includes/pluggable.php
@ -283,7 +283,7 @@ if ( !function_exists('wp_redirect') ) :
 function wp_redirect($location) {
 	global $is_IIS;

-	$location = str_replace( array("\n", "\r"), '', $location);
+	$location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $location);

 	if ($is_IIS)
 		header("Refresh: 0;url=$location");