aboutsummaryrefslogtreecommitdiffstats
path: root/Zotlabs/Module/Nojs.php
diff options
context:
space:
mode:
authorzotlabs <mike@macgirvin.com>2018-07-18 17:05:38 -0700
committerMario <mario@mariovavti.com>2018-07-19 09:19:33 +0200
commit931afe98b13399342d5abb4cb13cb09efc09ecad (patch)
tree9de86698483283b8d4d36bebc6162949172d9f07 /Zotlabs/Module/Nojs.php
parent4a6f775334fbf3af2e8e6c781a9a44192a6526d0 (diff)
downloadvolse-hubzilla-931afe98b13399342d5abb4cb13cb09efc09ecad.tar.gz
volse-hubzilla-931afe98b13399342d5abb4cb13cb09efc09ecad.tar.bz2
volse-hubzilla-931afe98b13399342d5abb4cb13cb09efc09ecad.zip
mangled urls on redirects
(cherry picked from commit 5ce50d0a2e15ae66765a68ba2785a87ecda57f6a)
Diffstat (limited to 'Zotlabs/Module/Nojs.php')
-rw-r--r--Zotlabs/Module/Nojs.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/Zotlabs/Module/Nojs.php b/Zotlabs/Module/Nojs.php
index 6fd6d8106..5f3d80ecd 100644
--- a/Zotlabs/Module/Nojs.php
+++ b/Zotlabs/Module/Nojs.php
@@ -7,8 +7,8 @@ class Nojs extends \Zotlabs\Web\Controller {
function init() {
$n = ((argc() > 1) ? intval(argv(1)) : 1);
setcookie('jsdisabled', $n, 0, '/');
- $p = $_GET['redir'];
- $hasq = strpos($p,'?');
+ $p = hex2bin($_GET['redir']);
+ $hasq = strpbrk($p,'?&');
goaway(z_root() . (($p) ? '/' . $p : '') . (($hasq) ? '' : '?f=' ) . '&jsdisabled=' . $n);
}