Changeset 24481 for branches/3.5/wp-admin/includes/class-wp-importer.php

Timestamp:

06/21/2013 06:12:17 AM (11 years ago)

Author:

nacin

Message:

Better validation of the URL used in core HTTP requests.

Merges [24480] to the 3.5 branch.

Location:

branches/3.5

Files:

• . (modified) (1 prop)
• wp-admin/includes/class-wp-importer.php (modified) (1 diff)

branches/3.5/wp-admin/includes/class-wp-importer.php

@@ -184 +184 @@
         $headers = array();
         $args = array();
+        $args['reject_unsafe_urls'] = true;
         if ( true === $head )
             $args['method'] = 'HEAD';