aboutsummaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorMario Vavti <mario@mariovavti.com>2025-01-23 21:24:06 +0100
committerMario Vavti <mario@mariovavti.com>2025-01-23 21:24:06 +0100
commit8e51988e96834e3b1728e3b5085c8db40ce040a3 (patch)
tree25f79872521bcde261f4c1b41f89e590e06b7218 /include
parent52e279f4437f597615cb450b61d21d558b5ace63 (diff)
downloadvolse-hubzilla-8e51988e96834e3b1728e3b5085c8db40ce040a3.tar.gz
volse-hubzilla-8e51988e96834e3b1728e3b5085c8db40ce040a3.tar.bz2
volse-hubzilla-8e51988e96834e3b1728e3b5085c8db40ce040a3.zip
unescape_tags() on URLs before we start messing with them
Diffstat (limited to 'include')
-rw-r--r--include/zid.php5
1 files changed, 4 insertions, 1 deletions
diff --git a/include/zid.php b/include/zid.php
index 2b5d53916..b74e82930 100644
--- a/include/zid.php
+++ b/include/zid.php
@@ -150,6 +150,9 @@ function clean_query_string($s = '') {
*/
function drop_query_params($s, $p) {
+
+ $s = unescape_tags($s);
+
$parsed = parse_url($s);
$query = '';
$query_args = null;
@@ -172,7 +175,7 @@ function drop_query_params($s, $p) {
$parsed['query'] = $query;
}
- return unparse_url($parsed);
+ return escape_tags(unparse_url($parsed));
}