diff --git a/socialfy-your-domain/dot-well-known/webfinger/index.php b/socialfy-your-domain/dot-well-known/webfinger/index.php index 989b3203be..91071bc4c3 100644 --- a/socialfy-your-domain/dot-well-known/webfinger/index.php +++ b/socialfy-your-domain/dot-well-known/webfinger/index.php @@ -31,6 +31,9 @@ if (mb_strpos($u, 'acct:')===0) { $u = substr($u, 5); } +// Just to be a little bit safer, you know, with all the unicode stuff going on +$u = filter_var($u, FILTER_SANITIZE_EMAIL); + $f = $u . ".xml"; if (file_exists($f)) {