diff options
| -rw-r--r-- | it_url.class | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/it_url.class b/it_url.class index 5e29905..f92f4bb 100644 --- a/it_url.class +++ b/it_url.class @@ -539,7 +539,10 @@ function redirect($url = null) if (EDC('noredir')) echo "<a href='" . htmlspecialchars(it_url::absolute($url)) . "'>" . htmlspecialchars($url) . "</a><br />"; else - header('Location: '.preg_replace("/[\r\n].*/", '', it_url::absolute($url))); # Security: cut after CR/LF + { + $url = preg_replace("/[\r\n].*/", '', it_url::absolute($url)); # Security: cut after CR/LF + header('Location: ' . it_untaint($url, TC_SELF)); + } exit; } |