Commit 38b09ba16d57aa7359b1ded78a52db3f8d5c7bdd
1 parent
3b3ec56b
#986627- removed redirect variable sanitisation- the redirect variable is used t…
…o lookup a page in the SiteMap, so this prevents a malicious redirect from being used. git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@2867 c91229c3-7414-0410-bfa2-8a42b809f60b
Showing
1 changed file
with
0 additions
and
1 deletions
presentation/login.php
| ... | ... | @@ -112,7 +112,6 @@ if ($loginAction == "loginForm") { |
| 112 | 112 | |
| 113 | 113 | // check for a location to forward to |
| 114 | 114 | if (isset($redirect) && strlen(trim($redirect))>0) { |
| 115 | - $redirect = sanitize($redirect); | |
| 116 | 115 | // remove any params from redirect before looking up from sitemap |
| 117 | 116 | if (strstr($redirect, "?")) { |
| 118 | 117 | $queryString = substr($redirect, strpos($redirect, "?")+1, strlen($redirect)); | ... | ... |