From caa3b7a299b119cf7891ea6f4f7bf3a5ba470b6e Mon Sep 17 00:00:00 2001
From: Christian Schneider
Date: Fri, 9 Nov 2007 16:55:02 +0000
Subject: No need to untaint base in U() so far

---
 it_html.class | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'it_html.class')

diff --git a/it_html.class b/it_html.class
index 08904a8..b44dd09 100644
--- a/it_html.class
+++ b/it_html.class
@@ -436,7 +436,7 @@ function u(/* ... */)
 	list($base, $params) = it_html::_parse_args($args);
 
 	if (!isset($base))
-		it_untaint($base = $_SERVER['PHP_SELF']);
+		$base = $_SERVER['PHP_SELF'];
 
 	$base = preg_replace('|\0|', '', $base);
 	$base = preg_replace('|[^\w.+!*(),:?@&=/~$-]|e', 'urlencode("$0")', $base);
-- 
cgit v1.2.3