From a01d8d8ccd3733ba24556e731ecac8323be1fab4 Mon Sep 17 00:00:00 2001
From: David Anderson <davea@ssl.berkeley.edu>
Date: Mon, 1 Aug 2011 21:09:29 +0000
Subject: [PATCH] - web: fix bug in next_url mechanism

svn path=/trunk/boinc/; revision=23912
---
 checkin_notes     | 6 ++++++
 html/inc/util.inc | 1 +
 2 files changed, 7 insertions(+)

diff --git a/checkin_notes b/checkin_notes
index f7f31215ad..25362cce68 100644
--- a/checkin_notes
+++ b/checkin_notes
@@ -4494,3 +4494,9 @@ David  31 July 2011
         sched_types.cpp
     html/user/
         create_account_form.cpp
+
+David  1 Aug 2011
+    - web: fix bug in next_url mechanism
+
+    html/inc/
+        util.inc
diff --git a/html/inc/util.inc b/html/inc/util.inc
index 2792548179..2c5d9a2ff5 100644
--- a/html/inc/util.inc
+++ b/html/inc/util.inc
@@ -795,6 +795,7 @@ function get_app_types() {
 // "next_url" arguments (must be local, not full URLs)
 //
 function sanitize_local_url($x) {
+    $x = trim($x, "/");
     if (strstr($x, "/")) return "";
     if (strstr($x, "<")) return "";
     if (strstr($x, "\"")) return "";