redirect_to() using & instead of &
Reported by Fabrice Luraine | 2011-01-31 19:22:15 UTC
Because it uses url_for to construct url, it
escapes & in &, so target url
might be broken.
url_for is an html helper, so it's better to keep
its output html escaped. The best solution will be to decode it
before using it in redirect_to()
[Bug submitted in github: https://github.com/sofadesign/limonade/issues#issue/14]
Comments and changes to this ticket
-
Fabrice Luraine 2011-01-31 19:27:12 UTC
We can use builtin
htmlspecialchars_decode()for PHP5.1.x > but we'll write our own html special chars decode function for PHP5.0.x versions -
Fabrice Luraine 2011-02-25 08:54:57 UTC
- State changed from “open” to “resolved”
(from [63715246dcd74218b4b66fb7dafa25502db8b8d3]) using htmlspecialchars_decode on uri when sending Location header [#49 state:resolved] https://github.com/sofadesign/limonade/commit/63715246dcd74218b4b66...
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Limonade is a PHP micro-framework.
People watching this ticket
Fabrice Luraine
Referenced by
-
49
redirect_to() using & instead of &
(from [63715246dcd74218b4b66fb7dafa25502db8b8d3])
using h...