Re: [git] web/qa.git branch master updated. df34f7f

Hi Johannes: > > http://git.php.net/?p=web/qa.git;a=log;h=df34f7ffed7c031f5fec4eb812ebe105b75575a3;hp=44d2e41fe5c42d448850f9c5bb04a03f653254df > if (empty($_SERVER['HTTPS'])) { > - header('Location: >https://'.$_SERER['HTTP_HOST'].'/pulls/'); > + header('Location: > https://'.$_SERVER['HTTP_HOST'].'/pulls/'); > exit; > } HTTP_HOST can be injected to. Can you please sanitize that before use? Thanks, --Dan -- T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y data intensive web and database programming http://www.AnalysisAndSolutions.com/ 4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409