From e00551ef6cb30b22ac5c8ed35c0e14bf43bfa9e0 Mon Sep 17 00:00:00 2001 From: markjaquith Date: Wed, 19 Nov 2008 06:32:10 +0000 Subject: [PATCH] Remove manual santization of redirect URLs (handled in wp_redirect()) git-svn-id: http://svn.automattic.com/wordpress/trunk@9779 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-admin/categories.php | 1 - wp-admin/edit-pages.php | 1 - wp-admin/edit.php | 1 - wp-admin/link-manager.php | 4 +--- wp-admin/page.php | 1 - wp-admin/post.php | 1 - 6 files changed, 1 insertion(+), 8 deletions(-) diff --git a/wp-admin/categories.php b/wp-admin/categories.php index 2977e0b6a..8a4275d27 100644 --- a/wp-admin/categories.php +++ b/wp-admin/categories.php @@ -70,7 +70,6 @@ case 'bulk-delete': } $sendback = wp_get_referer(); - $sendback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $sendback); wp_redirect($sendback); exit(); diff --git a/wp-admin/edit-pages.php b/wp-admin/edit-pages.php index 4adcd3bcd..e5a8aa26b 100644 --- a/wp-admin/edit-pages.php +++ b/wp-admin/edit-pages.php @@ -52,7 +52,6 @@ if ( isset($_GET['action']) && ( -1 != $_GET['action'] || -1 != $_GET['action2'] $sendback = wp_get_referer(); if (strpos($sendback, 'page.php') !== false) $sendback = admin_url('page-new.php'); elseif (strpos($sendback, 'attachments.php') !== false) $sendback = admin_url('attachments.php'); - $sendback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $sendback); if ( isset($done) ) { $done['updated'] = count( $done['updated'] ); $done['skipped'] = count( $done['skipped'] ); diff --git a/wp-admin/edit.php b/wp-admin/edit.php index 84bfb372e..0a41f1c15 100644 --- a/wp-admin/edit.php +++ b/wp-admin/edit.php @@ -52,7 +52,6 @@ if ( isset($_GET['action']) && ( -1 != $_GET['action'] || -1 != $_GET['action2'] $sendback = wp_get_referer(); if ( strpos($sendback, 'post.php') !== false ) $sendback = admin_url('post-new.php'); elseif ( strpos($sendback, 'attachments.php') !== false ) $sendback = admin_url('attachments.php'); - $sendback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $sendback); if ( isset($done) ) { $done['updated'] = count( $done['updated'] ); $done['skipped'] = count( $done['skipped'] ); diff --git a/wp-admin/link-manager.php b/wp-admin/link-manager.php index 1a32851c1..d7aab6ece 100644 --- a/wp-admin/link-manager.php +++ b/wp-admin/link-manager.php @@ -24,9 +24,7 @@ if ( isset($_GET['action']) && isset($_GET['linkcheck']) ) { wp_delete_link($link_id); } - $sendback = wp_get_referer(); - $sendback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $sendback); - wp_redirect($sendback); + wp_redirect( wp_get_referer() ); exit; } } elseif ( isset($_GET['_wp_http_referer']) && ! empty($_GET['_wp_http_referer']) ) { diff --git a/wp-admin/page.php b/wp-admin/page.php index 5d93b4209..aaca7bc07 100644 --- a/wp-admin/page.php +++ b/wp-admin/page.php @@ -168,7 +168,6 @@ case 'delete': $sendback = wp_get_referer(); if (strpos($sendback, 'page.php') !== false) $sendback = admin_url('page-new.php'); elseif (strpos($sendback, 'attachments.php') !== false) $sendback = admin_url('attachments.php'); - $sendback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $sendback); wp_redirect($sendback); exit(); break; diff --git a/wp-admin/post.php b/wp-admin/post.php index f9494d79e..17b2b05fb 100644 --- a/wp-admin/post.php +++ b/wp-admin/post.php @@ -213,7 +213,6 @@ case 'delete': $sendback = wp_get_referer(); if (strpos($sendback, 'post.php') !== false) $sendback = admin_url('post-new.php'); elseif (strpos($sendback, 'attachments.php') !== false) $sendback = admin_url('attachments.php'); - $sendback = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $sendback); wp_redirect($sendback); exit(); break;