esc_url_raw() is what you want for input

On Thu, May 9, 2013 at 1:20 PM, Joe Hoyle <notifications@github.com>
wrote:

>> @@ -195,10 +199,10 @@ function hma_profile_submitted() {
>>  	} else {
>>  
>>  	if ( ! empty( $_POST['redirect_to'] ) )
>> -	    $redirect = esc_attr( $_POST['redirect_to'] );
>> +	    $redirect = $_POST['redirect_to'];
> @danielbachhuber for URLs, what should I be using to best sanitize them - in the past I have used `esc_url` - however thinking maybe that's meant for output rather than sanitizing?
> ---
> Reply to this email directly or view it on GitHub:
> https://github.com/humanmade/hm-accounts/pull/1/files#r4160478