Changeset 3296

Timestamp:

06/03/2016 08:28:07 AM (8 years ago)

Author:

ocean90

Message:

WordPress.org SSO: Don't override the $redirect_to variable when encoding spaces.

File:

• sites/trunk/common/includes/wporg-sso/class-wporg-sso.php (modified) (1 diff)

sites/trunk/common/includes/wporg-sso/class-wporg-sso.php

@@ -101 +101 @@
             if ( ! empty( $_REQUEST['redirect_to'] ) ) {
                 // User is requesting a further redirect afterward, let's make sure it's a legit target.
-                $redirect_to = str_replace( ' ', '%20', $_REQUEST['redirect_to'] ); // Encode spaces.
-                $redirect_to_requested = function_exists( 'wp_sanitize_redirect' ) ? wp_sanitize_redirect( $redirect_to ) : $redirect_to;
+                $redirect_to_requested = str_replace( ' ', '%20', $_REQUEST['redirect_to'] ); // Encode spaces.
+                $redirect_to_requested = function_exists( 'wp_sanitize_redirect' ) ? wp_sanitize_redirect( $redirect_to_requested ) : $redirect_to_requested;
                 if ( $this->_is_valid_targeted_domain( $redirect_to_requested ) ) {
                     $redirect_to = $redirect_to_requested;