Ticket #25229: http.php.3.diff

wp-includes/http.php

@@ -338 +338 @@
         if ( ! empty ( $_SERVER[ 'HTTP_ORIGIN' ] ) )
                 $origin = $_SERVER[ 'HTTP_ORIGIN' ];
 
+        /**
+         * Change the origin of an HTTP requestion.
+         *
+         * @since 3.4.0
+         *
+         * @param string $origin The original origin for the request.
+         */
         return apply_filters( 'http_origin', $origin );
 }
 
@@ -360 +367 @@
                 'https://' . $home_origin[ 'host' ],
         ) );
 
+        /**
+         * Change the origin types allowed for http requests.
+         *
+         * @since 3.4.0
+         *
+         * @param array $allowed_origins {
+         *     Default allowed http origins.
+         *     @type string Non-secure url for admin origin.
+         *     @type string Secure url for admin origin.
+         *     @type string Non-secure url for home origin.
+         *     @type string Secure url for home origin.
+         * }
+         */
         return apply_filters( 'allowed_http_origins' , $allowed_origins );
 }
 
@@ -380 +400 @@
         if ( $origin && ! in_array( $origin, get_allowed_http_origins() ) )
                 $origin = '';
 
+        /**
+         * Change the allowed http origin result.
+         *
+         * @since 3.4.0
+         *
+         * @param string $origin Result of check for allowed origin.
+         * @param string $origin_arg original origin string passed into is_allowed_http_origin function.
+         */
         return apply_filters( 'allowed_http_origin', $origin, $origin_arg );
 }
 
@@ -458 +486 @@
                                 || ( 192 === $parts[0] && 168 === $parts[1] )
                         ) {
                                 // If host appears local, reject unless specifically allowed.
+                                /**
+                                 * Check if http request is external or not.
+                                 *
+                                 * Allows to change and allow external requests for the http request.
+                                 *
+                                 * @since 3.6.0
+                                 *
+                                 * @param bool false Whether http request is external or not.
+                                 * @param string $host IP of the requested host.
+                                 * @param string $url URL of the requested host.
+                                 */
                                 if ( ! apply_filters( 'http_request_host_is_external', false, $host, $url ) )
                                         return false;
                         }