]> CyberLeo.Net >> Repos - Github/YOURLS.git/commit
Introduce yourls_sanitize_url_safe()
authorozh <ozh@ozh.org>
Sun, 5 Feb 2017 15:04:50 +0000 (16:04 +0100)
committerozh <ozh@ozh.org>
Sun, 5 Feb 2017 15:04:50 +0000 (16:04 +0100)
commit6748ce8a947e38e5b411ca6729967aa47b3fae9f
tree7b4e2967ecb4b643a7c39dcf4a5521ac26ed4dd8
parent3f72b0c1d7ecfbece85b3c2ae38b1f310ab9cd53
Introduce yourls_sanitize_url_safe()

Remove anti CRLF checks from yourls_sanitize_url() and yourls_esc_url() because some legit URLs have %0A or %0D
We're just stripping those, using new function yourls_sanitize_url_safe(), for internal redirection when target location isn't hardcoded.
admin/index.php
includes/functions-auth.php
includes/functions-formatting.php
includes/functions.php