Home
last modified time | relevance | path

Searched hist:"98 ca30d292f2cc203a5251719e06d1a9f2bdf4b4" (Results 1 – 1 of 1) sorted by relevance

/dokuwiki/inc/
H A Dcommon.php98ca30d292f2cc203a5251719e06d1a9f2bdf4b4 Thu Mar 31 16:16:37 UTC 2016 Andreas Gohr <andi@splitbrain.org> avoid HTTP Response Splitting attacks via redirects #1513

The header() method of PHP is vulnerable to HTTP Response Splitting
attacks.

This change makes sure the URL passed to send_redirect (and thus to
header()) does not contain any control characters that would be needed
to execute such an attack.

Cleaning input is recommended anyway.