Opened 19 months ago

Closed 19 months ago

#19076 closed defect (bug) (fixed)

smugmug oEmbed regex can match incorrect domains

Reported by: duck_ Owned by: duck_
Priority: normal Milestone: 3.3
Component: Embeds Version:
Severity: normal Keywords: has-patch commit
Cc:

Description

The smugmug oEmbed regex should add an escaped . to ensure it only matches "*.smugmug.com" and not something like "notsmugmug.com".

See also #17106

Attachments (1)

19076.diff​ (1.8 KB) - added by duck_ 19 months ago.

Download all attachments as: .zip

Change History (3)

duck_ — 19 months ago

comment:1   nacin — 19 months ago

  • Keywords commit added
  • Milestone changed from Awaiting Review to 3.3

comment:2   duck_ — 19 months ago

  • Owner set to duck_
  • Resolution set to fixed
  • Status changed from new to closed

In [19079]:

Ensure auto-embed only matches "smugmug.com" and its subdomains. Fixes #19076.

Note: See TracTickets for help on using tickets.