[wp-hackers] Re: [wp-svn] [3939] trunk/wp-includes/pluggable.php: Allow % so entities such as slashes don't break.

[Matt Mullenweg]

Ryan Boren wrote:
> I think we can whitelist since wp_redirect() is limited to admin URIs. I 
> don't think it needs to be able to handle arbitrary URLs or encoded i18n.

We use wp_redirect in wp-comments-post.php.

-- 
Matt Mullenweg
  http://photomatt.net | http://wordpress.org
http://automattic.com | http://akismet.com