Changeset 33537 for branches/4.1/src/wp-includes/class-wp-customize-widgets.php

Timestamp:

08/03/2015 08:59:23 PM (9 years ago)

Author:

ocean90

Message:

Customizer: Use hash_equals() for widgets.

Merge of [33535] to the 4.1 branch.

File:

• branches/4.1/src/wp-includes/class-wp-customize-widgets.php (modified) (1 diff)

branches/4.1/src/wp-includes/class-wp-customize-widgets.php

@@ -1200 +1200 @@
         }
 
-        if ( $this->get_instance_hash_key( $decoded ) !== $value['instance_hash_key'] ) {
+        if ( ! hash_equals( $this->get_instance_hash_key( $decoded ), $value['instance_hash_key'] ) ) {
             return null;
         }