mirror of
https://github.com/phpbb/phpbb.git
synced 2025-08-03 15:27:42 +02:00
some changes for the new version
- it would be nice if anyone able would be testing these changes on their installations and report bugs as soon as possible (also do not hestitate to PM the developers. ;)). - the changelog is ommitted for now - it will get checked in later. git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@6772 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
@@ -917,7 +917,7 @@ function redirect($url)
|
||||
$db->sql_close();
|
||||
}
|
||||
|
||||
if (strstr(urldecode($url), "\n") || strstr(urldecode($url), "\r"))
|
||||
if (strstr(urldecode($url), "\n") || strstr(urldecode($url), "\r") || strstr(urldecode($url), ';url'))
|
||||
{
|
||||
message_die(GENERAL_ERROR, 'Tried to redirect to potentially insecure url.');
|
||||
}
|
||||
|
Reference in New Issue
Block a user