diff options
author | zotlabs <mike@macgirvin.com> | 2018-07-18 17:05:38 -0700 |
---|---|---|
committer | Mario <mario@mariovavti.com> | 2018-07-19 09:19:33 +0200 |
commit | 931afe98b13399342d5abb4cb13cb09efc09ecad (patch) | |
tree | 9de86698483283b8d4d36bebc6162949172d9f07 /Zotlabs/Module/Nojs.php | |
parent | 4a6f775334fbf3af2e8e6c781a9a44192a6526d0 (diff) | |
download | volse-hubzilla-931afe98b13399342d5abb4cb13cb09efc09ecad.tar.gz volse-hubzilla-931afe98b13399342d5abb4cb13cb09efc09ecad.tar.bz2 volse-hubzilla-931afe98b13399342d5abb4cb13cb09efc09ecad.zip |
mangled urls on redirects
(cherry picked from commit 5ce50d0a2e15ae66765a68ba2785a87ecda57f6a)
Diffstat (limited to 'Zotlabs/Module/Nojs.php')
-rw-r--r-- | Zotlabs/Module/Nojs.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/Zotlabs/Module/Nojs.php b/Zotlabs/Module/Nojs.php index 6fd6d8106..5f3d80ecd 100644 --- a/Zotlabs/Module/Nojs.php +++ b/Zotlabs/Module/Nojs.php @@ -7,8 +7,8 @@ class Nojs extends \Zotlabs\Web\Controller { function init() { $n = ((argc() > 1) ? intval(argv(1)) : 1); setcookie('jsdisabled', $n, 0, '/'); - $p = $_GET['redir']; - $hasq = strpos($p,'?'); + $p = hex2bin($_GET['redir']); + $hasq = strpbrk($p,'?&'); goaway(z_root() . (($p) ? '/' . $p : '') . (($hasq) ? '' : '?f=' ) . '&jsdisabled=' . $n); } |