Changeset 24481 for branches/3.5/wp-includes/class-wp-xmlrpc-server.php

Timestamp:

06/21/2013 06:12:17 AM (12 years ago)

Author:

nacin

Message:

Better validation of the URL used in core HTTP requests.

Merges [24480] to the 3.5 branch.

Location:

branches/3.5

Files:

• . (modified) (1 prop)
• wp-includes/class-wp-xmlrpc-server.php (modified) (1 diff)

branches/3.5/wp-includes/class-wp-xmlrpc-server.php

@@ -5381 +5381 @@
 
         // Let's check the remote site
-        $linea = wp_remote_retrieve_body( wp_remote_get( $pagelinkedfrom, array( 'timeout' => 10, 'redirection' => 0 ) ) );
+        $linea = wp_remote_retrieve_body( wp_remote_get( $pagelinkedfrom, array( 'timeout' => 10, 'redirection' => 0, 'reject_unsafe_urls' => true ) ) );
+
         if ( !$linea )
             return $this->pingback_error( 16, __( 'The source URL does not exist.' ) );