Changeset 19079

Timestamp:

10/28/11 20:05:43 (2 years ago)

Author:

duck_

Message:

Ensure auto-embed only matches "smugmug.com" and its subdomains. Fixes #19076.

File:

• trunk/wp-includes/class-oembed.php (modified) (2 diffs)

trunk/wp-includes/class-oembed.php

@@ -37 +37 @@
             '#http://(www\.)?dailymotion\.com/.*#i'         => array( 'http://www.dailymotion.com/api/oembed',    true  ),
             '#http://(www\.)?flickr\.com/.*#i'              => array( 'http://www.flickr.com/services/oembed/',   true  ),
-            '#http://(.+)?smugmug\.com/.*#i'                => array( 'http://api.smugmug.com/services/oembed/',  true  ),
+            '#http://(.+\.)?smugmug\.com/.*#i'              => array( 'http://api.smugmug.com/services/oembed/',  true  ),
             '#http://(www\.)?hulu\.com/watch/.*#i'          => array( 'http://www.hulu.com/api/oembed.{format}',  true  ),
             '#http://(www\.)?viddler\.com/.*#i'             => array( 'http://lab.viddler.com/services/oembed/',  true  ),
@@ -46 +46 @@
             '#http://(www\.)?scribd\.com/.*#i'              => array( 'http://www.scribd.com/services/oembed',    true  ),
             'http://wordpress.tv/*'                         => array( 'http://wordpress.tv/oembed/',              false ),
-            '#http://(.+\.)?polldaddy\.com/.*#i'        => array( 'http://polldaddy.com/oembed/',             true  ),
+            '#http://(.+\.)?polldaddy\.com/.*#i'            => array( 'http://polldaddy.com/oembed/',             true  ),
             '#http://(www\.)?funnyordie\.com/videos/.*#i'   => array( 'http://www.funnyordie.com/oembed',         true  ),
         ) );