Make WordPress Core


Ignore:
Timestamp:
07/31/2013 06:46:02 AM (12 years ago)
Author:
nacin
Message:

Additional checks when evaluating the safety of an HTTP request, to avoid false negatives.

Merges [24915] to the 3.6 branch.
fixes #24646.

Location:
branches/3.6
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/3.6

  • branches/3.6/wp-includes/ms-default-filters.php

    r21823 r24916  
    6565// If the network upgrade hasn't run yet, assume ms-files.php rewriting is used.
    6666add_filter( 'default_site_option_ms_files_rewriting', '__return_true' );
     67
     68// Whitelist multisite domains for HTTP requests
     69add_filter( 'http_request_host_is_external', 'ms_allowed_http_request_hosts', 20, 2 );
Note: See TracChangeset for help on using the changeset viewer.