Changeset 24481 for branches/3.5/wp-includes/functions.php

Timestamp:

06/21/2013 06:12:17 AM (11 years ago)

Author:

nacin

Message:

Better validation of the URL used in core HTTP requests.

Merges [24480] to the 3.5 branch.

Location:

branches/3.5

Files:

• . (modified) (1 prop)
• wp-includes/functions.php (modified) (3 diffs)

branches/3.5/wp-includes/functions.php

@@ -497 +497 @@
     $options = array();
     $options['redirection'] = 5;
+    $options['reject_unsafe_urls'] = true;
 
     if ( false == $file_path )
@@ -544 +545 @@
         _deprecated_argument( __FUNCTION__, '2.7' );
 
-    $response = wp_remote_head( $url );
+    $response = wp_remote_head( $url, array( 'reject_unsafe_urls' => true ) );
 
     if ( is_wp_error( $response ) )
@@ -759 +760 @@
     $options = array();
     $options['timeout'] = 10;
+    $options['reject_unsafe_urls'] = true;
 
     $response = wp_remote_get( $uri, $options );