Changeset 38165 for trunk/src/wp-includes/class-http.php

Timestamp:

07/27/2016 03:51:19 PM (8 years ago)

Author:

ocean90

Message:

HTTP API: All non-GET/HEAD requests should put the arguments in the form body.

Requests defaults to _GET/query for HEAD/GET/DELETE and _POST/body for POST/PUT/OPTIONS/PATCH. For backward compatibility WP_HTTP needs to force data_format to 'body' for all non-GET/HEAD requests.

Props dd32.
Fixes #37456.

File:

• trunk/src/wp-includes/class-http.php (modified) (2 diffs)

trunk/src/wp-includes/class-http.php

@@ -316 +316 @@
         if ( empty( $r['redirection'] ) ) {
             $options['follow_redirects'] = false;
-        }
-        else {
+        } else {
             $options['redirects'] = $r['redirection'];
         }
@@ -334 +333 @@
         if ( ! $r['sslverify'] ) {
             $options['verify'] = false;
-        }
-        else {
+        } else {
             $options['verify'] = $r['sslcertificates'];
+        }
+
+        // All non-GET/HEAD requests should put the arguments in the form body.
+        if ( 'HEAD' !== $type && 'GET' !== $type ) {
+            $options['data_format'] = 'body';
         }