more cleaning of url parameter in redirect() - SC#100

2005-04-20 20:45:43 +00:00
parent fda5a2338f
commit e1c8b46a9d
1 changed files with 1 additions and 0 deletions
@@ -3687,6 +3687,7 @@ function redirect($url, $message='', $delay='0') {
    $message = clean_text($message);

    $url = html_entity_decode($url); // for php < 4.3.0 this is defined in moodlelib.php
+    $url = str_replace(array("\n", "\r"), '', $url); // some more cleaning
    $encodedurl = htmlentities($url);

    if (empty($message)) {