diff options
author | Mario Vavti <mario@mariovavti.com> | 2025-01-23 21:24:06 +0100 |
---|---|---|
committer | Mario Vavti <mario@mariovavti.com> | 2025-01-23 21:24:06 +0100 |
commit | 8e51988e96834e3b1728e3b5085c8db40ce040a3 (patch) | |
tree | 25f79872521bcde261f4c1b41f89e590e06b7218 /include | |
parent | 52e279f4437f597615cb450b61d21d558b5ace63 (diff) | |
download | volse-hubzilla-8e51988e96834e3b1728e3b5085c8db40ce040a3.tar.gz volse-hubzilla-8e51988e96834e3b1728e3b5085c8db40ce040a3.tar.bz2 volse-hubzilla-8e51988e96834e3b1728e3b5085c8db40ce040a3.zip |
unescape_tags() on URLs before we start messing with them
Diffstat (limited to 'include')
-rw-r--r-- | include/zid.php | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/include/zid.php b/include/zid.php index 2b5d53916..b74e82930 100644 --- a/include/zid.php +++ b/include/zid.php @@ -150,6 +150,9 @@ function clean_query_string($s = '') { */ function drop_query_params($s, $p) { + + $s = unescape_tags($s); + $parsed = parse_url($s); $query = ''; $query_args = null; @@ -172,7 +175,7 @@ function drop_query_params($s, $p) { $parsed['query'] = $query; } - return unparse_url($parsed); + return escape_tags(unparse_url($parsed)); } |