Work around Facebook not reading the URI RFC

diff --git a/wcfsetup/install/files/lib/action/FacebookAuthAction.class.php b/wcfsetup/install/files/lib/action/FacebookAuthAction.class.php
index 8f66cc87934117001d7f3a31082a9b5b52ee554b..bec9de7e3f28d6271c97796950bc4dbe985bd63b 100644 (file)
--- a/wcfsetup/install/files/lib/action/FacebookAuthAction.class.php
+++ b/wcfsetup/install/files/lib/action/FacebookAuthAction.class.php
@@ -36,6 +36,13 @@ class FacebookAuthAction extends AbstractAction {
                parent::execute();
                
                $callbackURL = LinkHandler::getInstance()->getLink('FacebookAuth');
+
+               // Work around Facebook performing an illegal substitution of the Slash
+               // by '%2F' when entering redirect URI (RFC 3986 sect. 2.2, sect. 3.4)
+               $callbackURL = preg_replace_callback('/(?<=\?).*/', function ($matches) {
+                       return rawurlencode($matches[0]);
+               }, $callbackURL);
+
                // user accepted the connection
                if (isset($_GET['code'])) {
                        try {