severity  404222 serious
thanks

I am preparing an upload with your suggestion.
Can you confirm that this patch fixes this issue?
Any testing is greatly appreciated, as the main maintainer is on holiday
and I have limited time + resources to actually test this.

Marcus C. Gottwald wrote:
>   Sven's version:
>     params => [ 'redirect', 'unsafe redirect to '.$url ]);
> 
>   A suggestion:
>     params => [ 'redirect', 'unsafe redirect to '.$url.': '.$host.' does not 
> match DefaultUrlHost' ]);

-- 
  ยท''`.             If I can't dance to it, it's not my revolution
 : :' :                                            -- Emma Goldman
 `. `'           Proudly running Debian GNU/Linux (unstable)
   `-     www.amayita.com  www.malapecora.com  www.chicasduras.com

Reply via email to