wp_sanitize_redirect( string $location ): string

1557	function wp_sanitize_redirect( $location ) {1558		// Encode spaces.1559		$location = str_replace( ' ', '%20', $location );1560 1561		$regex    = '/1562		(1563			(?: [\xC2-\xDF][\x80-\xBF]        # double-byte sequences   110xxxxx 10xxxxxx1564			|   \xE0[\xA0-\xBF][\x80-\xBF]    # triple-byte sequences   1110xxxx 10xxxxxx * 21565			|   [\xE1-\xEC][\x80-\xBF]{2}1566			|   \xED[\x80-\x9F][\x80-\xBF]1567			|   [\xEE-\xEF][\x80-\xBF]{2}1568			|   \xF0[\x90-\xBF][\x80-\xBF]{2} # four-byte sequences   11110xxx 10xxxxxx * 31569			|   [\xF1-\xF3][\x80-\xBF]{3}1570			|   \xF4[\x80-\x8F][\x80-\xBF]{2}1571		){1,40}                              # ...one or more times1572		)/x';1573		$location = preg_replace_callback( $regex, '_wp_sanitize_utf8_in_redirect', $location );1574		$location = preg_replace( '|[^a-z0-9-~+_.?#=&;,/:%!*\[\]()@]|i', '', $location );1575		$location = wp_kses_no_null( $location );1576 1577		// Remove %0D and %0A from location.1578		$strip = array( '%0d', '%0a', '%0D', '%0A' );1579		return _deep_replace( $strip, $location );1580	}