From 6f11e0526e76fb91b151060682cebd5bc491d574 Mon Sep 17 00:00:00 2001
From: "Jason A. Donenfeld" <Jason@zx2c4.com>
Date: Wed, 16 Nov 2011 01:11:28 -0500
Subject: Don't allow header injection.

---
 web/redirect.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'web/redirect.php')

diff --git a/web/redirect.php b/web/redirect.php
index ddcd2c9..2a27cb2 100644
--- a/web/redirect.php
+++ b/web/redirect.php
@@ -15,7 +15,7 @@ function cachePath($path) {
 	return $path;
 }
 
-$url = $_SERVER["SCRIPT_URL"];
+$url = str_replace("\b", "", str_replace("\r", "", str_replace("\n", "", $_SERVER["SCRIPT_URL"])));
 if ($url[strlen($url) - 1] == '/')
 	$url = substr($url, 0, strlen($url) - 1);
 
-- 
cgit v1.2.3-59-g8ed1b