From e416b64e803a9be8f92a922cad7443cb84a48e35 Mon Sep 17 00:00:00 2001 From: ryan Date: Mon, 2 Oct 2006 19:26:12 +0000 Subject: [PATCH] Do only the minimum sanitization on the URL redirect. fixes #2994 git-svn-id: http://svn.automattic.com/wordpress/trunk@4268 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-admin/theme-editor.php | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/wp-admin/theme-editor.php b/wp-admin/theme-editor.php index 3ac368b38..3281ba91c 100644 --- a/wp-admin/theme-editor.php +++ b/wp-admin/theme-editor.php @@ -44,11 +44,15 @@ case 'update': $f = fopen($real_file, 'w+'); fwrite($f, $newcontent); fclose($f); - wp_redirect("theme-editor.php?file=$file&theme=$theme&a=te"); + $location = "theme-editor.php?file=$file&theme=$theme&a=te"; } else { - wp_redirect("theme-editor.php?file=$file&theme=$theme"); + $location = "theme-editor.php?file=$file&theme=$theme"; } + $location = wp_kses_no_null($location); + $strip = array('%0d', '%0a'); + $location = str_replace($strip, '', $location); + header("Location: $location"); exit(); break;