bug #114066 [core] ForceSSL generates incorrectly escaped redirections
This commit is contained in:
@@ -88,6 +88,7 @@ danbarry
|
|||||||
+ [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
|
+ [lang] Hungarian update, thanks to Jozsef Tamas Herczeg - dodika
|
||||||
- bug #2113848 [navi] Page number after database switching
|
- bug #2113848 [navi] Page number after database switching
|
||||||
- patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg
|
- patch #2115966 [GUI] Checkboxes and IE 7, thanks to Martin - maschg
|
||||||
|
- bug #114066 [core] ForceSSL generates incorrectly escaped redirections
|
||||||
|
|
||||||
2.11.9.2 (2008-09-22)
|
2.11.9.2 (2008-09-22)
|
||||||
- [security] XSS in MSIE using NUL byte, thanks to JPCERT.
|
- [security] XSS in MSIE using NUL byte, thanks to JPCERT.
|
||||||
|
@@ -534,7 +534,7 @@ if ($_SESSION['PMA_Config']->get('ForceSSL')
|
|||||||
PMA_sendHeaderLocation(
|
PMA_sendHeaderLocation(
|
||||||
preg_replace('/^http/', 'https',
|
preg_replace('/^http/', 'https',
|
||||||
$_SESSION['PMA_Config']->get('PmaAbsoluteUri'))
|
$_SESSION['PMA_Config']->get('PmaAbsoluteUri'))
|
||||||
. PMA_generate_common_url($_GET));
|
. PMA_generate_common_url($_GET, '', '&'));
|
||||||
exit;
|
exit;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user