Skip to content

Commit 38fa119

Browse files
committed
Urlencode hostname
This can come from the HTTP header, so we need to be sure to sanitize it. Signed-off-by: Michal Čihař <michal@cihar.com>
1 parent 983faa9 commit 38fa119

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Diff for: libraries/Config.class.php

+1-1
Original file line numberDiff line numberDiff line change
@@ -1370,7 +1370,7 @@ public function checkPmaAbsoluteUri()
13701370
$pma_absolute_uri .= '@';
13711371
}
13721372
// Add hostname
1373-
$pma_absolute_uri .= $url['host'];
1373+
$pma_absolute_uri .= urlencode($url['host']);
13741374
// Add port, if it not the default one
13751375
// (or 80 for https which is most likely a bug)
13761376
if (! empty($url['port'])

0 commit comments

Comments
 (0)