use $goto_whitelist for $__redirect

libraries/common.lib.php

@@ -3128,12 +3128,9 @@ if ( ! defined('PMA_MINIMUM_COMMON') ) {
 
 } // end if ! defined('PMA_MINIMUM_COMMON' )
 
-$_SESSION['PMA_Config']->done = true;
-
-if ( ! empty( $__redirect ) ) {
-    // TODO: check against the $goto-whitelist
-    require PMA_securePath($__redirect);
+if ( ! empty( $__redirect ) && in_array($__redirect, $goto_whitelist) ) {
+    require $__redirect;
     exit();
-} // end if ( ! empty( $__redirect ) )
+}
 
 ?>