[wp-trac] [WordPress Trac] #18818: wp_sanitize_redirect() kills "@" in URL's

[WordPress Trac]

#18818: wp_sanitize_redirect() kills "@" in URL's
-----------------------------+------------------------------
 Reporter:  theandystratton  |       Owner:  theandystratton
     Type:  defect (bug)     |      Status:  reopened
 Priority:  normal           |   Milestone:
Component:  General          |     Version:  3.2.1
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------
Changes (by markjaquith):

 * status:  closed => reopened
 * resolution:  invalid =>


Comment:

 > The @ symbol is a reserved character in URLs. It's for separating the
 username from the host. You need to encode it.

 This is not true, according to RFC 3986. "@" is a perfectly valid
 character in a URL path or query string. It is only within the "user
 information" portion of a URL that it is reserved as a delimiter.
 https://medium.com/@nacin is a valid URL, and "@" shouldn't be stripped
 out of the path.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/18818#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform