Changeset 24480 for trunk/wp-admin/includes/class-wp-importer.php

Timestamp:

06/21/2013 06:07:47 AM (13 years ago)

Author:

nacin

Message:

Better validation of the URL used in core HTTP requests.

File:

• trunk/wp-admin/includes/class-wp-importer.php (modified) (1 diff)

trunk/wp-admin/includes/class-wp-importer.php

@@ -184 +184 @@
                 $headers = array();
                 $args = array();
+                $args['reject_unsafe_urls'] = true;
                 if ( true === $head )
                         $args['method'] = 'HEAD';