tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity

FIX Escape the redirect URL before outputting

Browse Source 
Signed-off-by: Stephen Shkardoon <stephen@silverstripe.com>
This commit is contained in:
Simon Welsh 2014-02-28 14:09:42 +13:00 committed by Stephen Shkardoon
parent 21f462a77b
commit ff9d40a60d
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
control/HTTPResponse.php
View File

@ -213,7 +213,7 @@ class SS_HTTPResponse {
} }
if(in_array($this->statusCode, self::$redirect_codes) && headers_sent($file, $line)) { if(in_array($this->statusCode, self::$redirect_codes) && headers_sent($file, $line)) {
$url = $this->headers['Location']; $url = Convert::raw2htmlatt($this->headers['Location']);
echo echo
"<p>Redirecting to <a href=\"$url\" title=\"Click this link if your browser does not redirect you\">" "<p>Redirecting to <a href=\"$url\" title=\"Click this link if your browser does not redirect you\">"
. "$url... (output started on $file, line $line)</a></p> . "$url... (output started on $file, line $line)</a></p>