mirror/php-phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-08-01 22:40:39 +02:00
Code Issues Releases Wiki Activity

[ticket/13280] Add additional sanitizer for ampersands in server superglobal

Browse Source 
PHPBB3-13280
This commit is contained in:
Marc Alexander
2014-11-03 17:14:18 +01:00
parent 6fd092b5df
commit 13b59af1ff
3 changed files with 14 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
phpBB/includes/functions.php
View File

@@ -2397,8 +2397,7 @@ function build_url($strip_vars = false)
global $config, $user, $phpbb_path_helper;
$php_ext = $phpbb_path_helper->get_php_ext();
// Change page back to expected format
$page = str_replace('&', '&', urldecode($user->page['page']));
$page = str_replace('&', '&', $user->page['page']);
// We need to be cautious here.
// On some situations, the redirect path is an absolute URL, sometimes a relative path