Changeset 33539

Timestamp:

08/03/2015 08:59:57 PM (10 years ago)

Author:

ocean90

Message:

Customizer: Use hash_equals() for widgets.

Merge of [33535] to the 3.9 branch.

File:

• branches/3.9/src/wp-includes/class-wp-customize-widgets.php (modified) (1 diff)

branches/3.9/src/wp-includes/class-wp-customize-widgets.php

@@ -1164 +1164 @@
         }
 
-        if ( $this->get_instance_hash_key( $decoded ) !== $value['instance_hash_key'] ) {
+        if ( ! hash_equals( $this->get_instance_hash_key( $decoded ), $value['instance_hash_key'] ) ) {
             return null;
         }