Changeset 46230

Timestamp:

09/21/2019 03:58:38 PM (5 years ago)

Author:

ocean90

Message:

File Editor: Don't verify SSL certificate when doing loopback requests for checking for fatal errors.

Props Clorith.
See #47957.

File:

• trunk/src/wp-admin/includes/file.php (modified) (2 diffs)

trunk/src/wp-admin/includes/file.php

@@ -519 +519 @@
         );
 
+        /** This filter is documented in wp-includes/class-wp-http-streams.php */
+        $sslverify = apply_filters( 'https_local_ssl_verify', false );
+
         // Include Basic auth in loopback requests.
         if ( isset( $_SERVER['PHP_AUTH_USER'] ) && isset( $_SERVER['PHP_AUTH_PW'] ) ) {
@@ -548 +551 @@
         }
         $url                    = add_query_arg( $scrape_params, $url );
-        $r                      = wp_remote_get( $url, compact( 'cookies', 'headers', 'timeout' ) );
+        $r                      = wp_remote_get( $url, compact( 'cookies', 'headers', 'timeout', 'sslverify' ) );
         $body                   = wp_remote_retrieve_body( $r );
         $scrape_result_position = strpos( $body, $needle_start );