Ticket #44317: 44317.diff

src/wp-includes/pluggable.php

@@ -1170 +1170 @@
         }
 endif;
 
+if ( ! function_exists( 'check_http_status_code' ) ) :
+        /**
+         * Verifies an HTTP status code is within a specific range
+         *
+         * @since 5.2.2
+         *
+         * @param int                                           $status   HTTP status code.
+         * @param string|array  $range          HTTP status code range or array of status code ranges such as 1XX, 2XX, etc.
+         *                                      Default 3XX.
+         * @param bool          $die                    Optional. Whether to die if the HTTP status code is not within specified range(s).
+         *                                Default true.
+         * @return false|int            False if the code is out of range. Returns HTTP status code if within specified range(s).
+         */
+        function check_http_status_code( $status = -1, $range = '3XX', $die = true ) {
+                if ( -1 == $status ) {
+                        _doing_it_wrong( __FUNCTION__, __( 'You should specify a HTTP status code to be verified by using the first parameter.' ), '5.2' );
+                }
+
+                $is_valid = false;      // Assume $status is invalid
+                $valid_range = false;   // Assume $range is invalid
+
+                $valid_codes = array (
+                        '1XX' => array ( 100, 101, 102, 103, ),                                                                                                                                                         // Information responses
+                        '2XX' => array ( 200, 201, 202, 203, 204, 205, 206, 207, 208, 226, ),                                   // Successful responses
+                        '3XX' => array ( 300, 301, 302, 303, 304, 305, 306, 307, 308, ),                                                        // Redirection messages
+                        '4XX' => array ( 400, 401, 402, 403, 404, 404, 405, 406, 407, 408, 409, 410,    // Client error responses
+                                                                                        411, 412, 413, 414, 415, 416, 417, 418, 421, 422, 423, 424,
+                                                                                        425, 426, 428, 429, 431, 440, 444, 449, 451, 494, 495, 496,
+                                                                                        497, 499, ),
+                        '5XX' => array ( 500, 501, 502, 503, 504, 505, 506, 507, 508, 501, 511, ),              // Server error responses
+                );
+
+                if ( is_array( $range ) ) {
+                        foreach ( $range as $r ) {
+                                if ( array_key_exists( $r, $valid_codes ) ) {
+                                        $valid_range = true;
+                                        if ( in_array( $status, $valid_codes[$r] ) ) {
+                                                $is_valid = $status;
+                                        }
+                                }
+                        }
+                } else {
+                        if ( array_key_exists( $range, $valid_codes ) ) {
+                                $valid_range = true;
+                                if ( in_array( $status, $valid_codes[$range] ) ) {
+                                        $is_valid = $status;
+                                }
+                        }
+                }
+
+                if ( false === $valid_range ) {
+                        _doing_it_wrong( __FUNCTION__, __( 'You should specify a valid HTTP status code range to be verified by using the second parameter.' ), '5.2' );
+                }
+
+                if ( $die && false === $is_valid ) {
+                        wp_die( __( 'HTTP status code out of range.' ) );
+                }
+
+                return $is_valid;
+        }
+endif;
+
 if ( ! function_exists( 'wp_redirect' ) ) :
         /**
          * Redirects to another page.
@@ -1220 +1282 @@
                  */
                 $status = apply_filters( 'wp_redirect_status', $status, $location );
 
+                // Accepts only valid HTTP status codes within the 3XX range
+                check_http_status_code( $status );
+
                 if ( ! $location ) {
                         return false;
                 }
@@ -2737 +2802 @@
                 return $r;
         }
 endif;
-