From c1aa11edcf043fc0523fe99ca75cb030c7ad5089 Mon Sep 17 00:00:00 2001 From: ozh Date: Sat, 4 Feb 2017 13:55:59 +0100 Subject: [PATCH] Remove overzealous check For instance, http://example.com/?req=http;//blah should not be modified into http://example.com/?req=http://blah If the user fucks up and enter http;//blah instead of http://blah, well, too bad for them. --- includes/functions-formatting.php | 1 - 1 file changed, 1 deletion(-) diff --git a/includes/functions-formatting.php b/includes/functions-formatting.php index b253f13..3b68e07 100644 --- a/includes/functions-formatting.php +++ b/includes/functions-formatting.php @@ -514,7 +514,6 @@ function yourls_esc_url( $url, $context = 'display', $protocols = array() ) { // TODO: check if that was it too destructive $strip = array( '%0d', '%0a', '%0D', '%0A' ); $url = yourls_deep_replace( $strip, $url ); - $url = str_replace( ';//', '://', $url ); // Replace ampersands and single quotes only when displaying. if ( 'display' == $context ) { -- 2.42.0