[wp-trac] [WordPress Trac] #47980: New wp_validate_redirect() removes domain in some circumstances.

[WordPress Trac]

#47980: New wp_validate_redirect() removes domain in some circumstances.
--------------------------+-----------------------------
 Reporter:  rconde        |       Owner:  SergeyBiryukov
     Type:  defect (bug)  |      Status:  assigned
 Priority:  normal        |   Milestone:  5.2.4
Component:  General       |     Version:  5.2.3
 Severity:  critical      |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+-----------------------------

Comment (by Sixes):

 I am seeing the same issue on a Ubuntu server (18.04.3 LTS).  The
 WordPress install is version 5.2.3 on a multi-site setup.

 I have tried removing the section at
 https://github.com/WordPress/WordPress/commit/c86ee39ff4c1a79b93c967eb88522f5c09614a28
 and this makes no difference.  Clearly adding a backslash to the ltrim()
 statement also has no effect.

 In any case, does ltrim() really take three parameters?  According to the
 php manual:

 {{{#!php
  ltrim ( string $str [, string $character_mask ] ) : string
 }}}

 The only other odd thing about this setup is that
 [https://fearoflanding.com/ Fear of Landing] redirects through
 Cloudflare.com.

 Any suggestions as to how to get round this issue?  Currently none of my
 users can log in.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47980#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform