[wp-trac] [WordPress Trac] #18818: wp_sanitize_redirect() kills "@" in URL's

WordPress Trac wp-trac at lists.automattic.com
Thu Sep 29 19:00:25 UTC 2011


#18818: wp_sanitize_redirect() kills "@" in URL's
-----------------------------+------------------------------
 Reporter:  theandystratton  |       Owner:  theandystratton
     Type:  defect (bug)     |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  General          |     Version:  3.2.1
 Severity:  normal           |  Resolution:
 Keywords:                   |
-----------------------------+------------------------------

Comment (by nacin):

 The @ symbol is a reserved character in URLs. It's for separating the
 username from the host. You need to encode it.

 As stated in #18814, it may be possible to encode it in query strings
 only, but I don't think we should.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/18818#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list