Changeset 24481 for branches/3.5/wp-includes/rss.php

Timestamp:

06/21/2013 06:12:17 AM (12 years ago)

Author:

nacin

Message:

Better validation of the URL used in core HTTP requests.

Merges [24480] to the 3.5 branch.

Location:

branches/3.5

Files:

• . (modified) (1 prop)
• wp-includes/rss.php (modified) (1 diff)

branches/3.5/wp-includes/rss.php

@@ -537 +537 @@
  */
 function _fetch_remote_file($url, $headers = "" ) {
-    $resp = wp_remote_request($url, array('headers' => $headers, 'timeout' => MAGPIE_FETCH_TIME_OUT));
+    $resp = wp_remote_request($url, array('headers' => $headers, 'timeout' => MAGPIE_FETCH_TIME_OUT, 'reject_unsafe_urls' => true ));
     if ( is_wp_error($resp) ) {
         $error = array_shift($resp->errors);