Skip to content

Commit

Permalink
Urlencode hostname
Browse files Browse the repository at this point in the history
This can come from the HTTP header, so we need to be sure to sanitize
it.

Signed-off-by: Michal Čihař <michal@cihar.com>
  • Loading branch information
nijel committed Feb 25, 2016
1 parent 983faa9 commit 38fa119
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion libraries/Config.class.php
Original file line number Diff line number Diff line change
Expand Up @@ -1370,7 +1370,7 @@ public function checkPmaAbsoluteUri()
$pma_absolute_uri .= '@';
}
// Add hostname
$pma_absolute_uri .= $url['host'];
$pma_absolute_uri .= urlencode($url['host']);
// Add port, if it not the default one
// (or 80 for https which is most likely a bug)
if (! empty($url['port'])
Expand Down

0 comments on commit 38fa119

Please sign in to comment.