[wp-trac] [WordPress Trac] #23489: obscure bug in home_url

[WordPress Trac]

#23489: obscure bug in home_url
-----------------------------+--------------------------
 Reporter:  adelval          |       Type:  defect (bug)
   Status:  new              |   Priority:  normal
Milestone:  Awaiting Review  |  Component:  General
  Version:  3.5.1            |   Severity:  normal
 Keywords:                   |
-----------------------------+--------------------------
 Try this:

 {{{
 echo home_url('?key=f..1').'<br />';
 echo home_url().'/?key=f..1');
 }}}

 The former prints only the home url - the argument is ignored or silently
 consumed. The latter gives the correct result, and the browser doesn't
 complain about the resulting address (so I assume it's a valid url?)

 The issue arised in a situation where we use a key generated with
 wp_hash_password, and one of the keys had those two consecutive dots.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/23489>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software