Changeset 5711

Timestamp:

04/24/2015 04:02:49 PM (11 years ago)

Author:

johnjamesjacoby

Message:

Common: Use esc_url() in bbp_redirect_to_field() and late escape for clarity.

File:

• trunk/src/includes/common/template.php (modified) (1 diff)

trunk/src/includes/common/template.php

@@ -1263 +1263 @@
 
     // Remove loggedout query arg if it's there
-    $redirect_to    = (string) esc_attr( remove_query_arg( 'loggedout', $redirect_to ) );
-    $redirect_field = '<input type="hidden" id="bbp_redirect_to" name="redirect_to" value="' . $redirect_to . '" />';
+    $redirect_to    = remove_query_arg( 'loggedout', $redirect_to );
+    $redirect_field = '<input type="hidden" id="bbp_redirect_to" name="redirect_to" value="' . esc_url( $redirect_to ) . '" />';
 
     echo apply_filters( 'bbp_redirect_to_field', $redirect_field, $redirect_to );