Changeset 24480 for trunk/wp-admin/includes/class-wp-importer.php

Timestamp:

06/21/2013 06:07:47 AM (11 years ago)

Author:

nacin

Message:

Better validation of the URL used in core HTTP requests.

File:

• trunk/wp-admin/includes/class-wp-importer.php (modified) (1 diff)

trunk/wp-admin/includes/class-wp-importer.php

@@ -184 +184 @@
         $headers = array();
         $args = array();
+        $args['reject_unsafe_urls'] = true;
         if ( true === $head )
             $args['method'] = 'HEAD';