Changeset 33536 for branches/4.2/src/wp-includes/class-wp-customize-widgets.php

Timestamp:

08/03/2015 08:58:59 PM (9 years ago)

Author:

ocean90

Message:

Customizer: Use hash_equals() for widgets.

Merge of [33535] to the 4.2 branch.

File:

• branches/4.2/src/wp-includes/class-wp-customize-widgets.php (modified) (1 diff)

branches/4.2/src/wp-includes/class-wp-customize-widgets.php

@@ -1125 +1125 @@
         }
 
-        if ( $this->get_instance_hash_key( $decoded ) !== $value['instance_hash_key'] ) {
+        if ( ! hash_equals( $this->get_instance_hash_key( $decoded ), $value['instance_hash_key'] ) ) {
             return null;
         }