www: diag* updates for #1168

src/www/diag_ipsec.php

@@ -73,8 +73,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
           break;
     }
 
-    header("Location: diag_ipsec.php");
-    exit(0);
+    header(url_safe('Location: /diag_ipsec.php'));
+    exit;
 }
 
 $ipsec_status = json_decode(configd_run("ipsec list status"), true);

src/www/diag_packet_capture.php

@@ -250,7 +250,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') {
         stop_capture();
     } elseif (!empty($pconfig['remove'])) {
         @unlink('/tmp/packetcapture.cap');
-        header("Location: diag_packet_capture.php");
+        header(url_safe('Location: /diag_packet_capture.php'));
         exit;
     }
 }

src/www/diag_tables.php

@@ -60,13 +60,13 @@ if ($_SERVER['REQUEST_METHOD'] === 'GET') {
               $delEntry = escapeshellarg($_REQUEST['address']);
               $delTable = escapeshellarg($tablename);
               configd_run("filter delete table {$delTable} {$delEntry}");
-              header("Location: diag_tables.php?tablename=" . $tablename);
+              header(url_safe('Location: /diag_tables.php?tablename=%s', array($tablename)));
               exit;
         }
     } elseif (isset($_POST['act']) && $_POST['act'] == 'flush')  {
         $delTable = escapeshellarg($tablename);
         configd_run("filter delete table {$delTable} ALL");
-        header("Location: diag_tables.php?tablename=" . $tablename);
+        header(url_safe('Location: /diag_tables.php?tablename=%s', array($tablename)));
         exit;
     }
 }