SSO: Fix wrongly-escaped URL used for redirection.

See humanmade#114
r-a-y · Oct 20, 2020 · 419cf26 · 419cf26
1 parent 66cc139
commit 419cf26
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/sso.php b/sso.php
@@ -329,7 +329,7 @@ function output_javascript_priv() {
 
 	document.write('<body>');
 	document.body.style.display='none';
-	window.location = '<?php echo addslashes( esc_js( $url ) ); ?>&fragment='+encodeURIComponent(document.location.hash);
+	window.location = '<?php echo addslashes( esc_url_raw( $url ) ); ?>&fragment='+encodeURIComponent(document.location.hash);
 };
 <?php