From c9565321824f3ea92e2af5af79bb622931927a65 Mon Sep 17 00:00:00 2001 From: Franco Fichtner Date: Fri, 2 Sep 2016 09:47:26 +0200 Subject: [PATCH] net/pptp: wrap redirects with url_safe() PR: https://github.com/opnsense/core/issues/1168 --- net/pptp/src/www/vpn_pptp_users.php | 2 +- net/pptp/src/www/vpn_pptp_users_edit.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/net/pptp/src/www/vpn_pptp_users.php b/net/pptp/src/www/vpn_pptp_users.php index cd1a37163..81d2cea90 100644 --- a/net/pptp/src/www/vpn_pptp_users.php +++ b/net/pptp/src/www/vpn_pptp_users.php @@ -50,7 +50,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') { } elseif (!empty($_POST['apply'])) { if_pptp_configure_do(); clear_subsystem_dirty('pptpusers'); - header("Location: vpn_pptp_users.php"); + header(url_safe('Location: vpn_pptp_users.php')); exit; } diff --git a/net/pptp/src/www/vpn_pptp_users_edit.php b/net/pptp/src/www/vpn_pptp_users_edit.php index 9db44e0a6..56404b631 100644 --- a/net/pptp/src/www/vpn_pptp_users_edit.php +++ b/net/pptp/src/www/vpn_pptp_users_edit.php @@ -133,7 +133,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') { pptpd_users_sort(); write_config(); if_pptp_configure_do(); - header("Location: vpn_pptp_users.php"); + header(url_safe('Location: vpn_pptp_users.php')); exit; } }