From 6a2bf58f789968214afa9fa8df670668089fd2f9 Mon Sep 17 00:00:00 2001 From: ryan Date: Thu, 6 Jul 2006 00:28:37 +0000 Subject: [PATCH] wp_kses_no_null() redirect location for extra protection. git-svn-id: http://svn.automattic.com/wordpress/trunk@3992 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/pluggable.php | 1 + 1 file changed, 1 insertion(+) diff --git a/wp-includes/pluggable.php b/wp-includes/pluggable.php index 103b5445c8..57eaecdd43 100644 --- a/wp-includes/pluggable.php +++ b/wp-includes/pluggable.php @@ -261,6 +261,7 @@ function wp_redirect($location) { global $is_IIS; $location = preg_replace('|[^a-z0-9-~+_.?#=&;,/:%]|i', '', $location); + $location = wp_kses_no_null($location); $strip = array('%0d', '%0a'); $location = str_replace($strip, '', $location);