Changeset 24641

Timestamp:

07/10/2013 01:35:30 PM (12 years ago)

Author:

nacin

Message:

In wp_http_validate_url(), only validate the protocol in lieu of esc_url_raw(). Ensure there is a host component to the URL. fixes #24663.

File:

• trunk/wp-includes/http.php (modified) (1 diff)

trunk/wp-includes/http.php

@@ -340 +340 @@
  */
 function wp_http_validate_url( $url ) {
-    $url = esc_url_raw( $url, array( 'http', 'https' ) );
+    $url = wp_kses_bad_protocol( $url, array( 'http', 'https' ) );
     if ( ! $url )
         return false;
 
     $parsed_url = @parse_url( $url );
-    if ( ! $parsed_url )
+    if ( ! $parsed_url || empty( $parsed_url['host'] ) )
         return false;