Changeset 46475

Timestamp:

10/14/2019 03:25:38 PM (7 years ago)

Author:

whyisjake

Message:

HTTP API: Protect against hex interpretation.

Return earlier from wp_http_validate_url().

Props: iandunn, xknown, voldemortensen, whyisjake.

File:

• trunk/src/wp-includes/http.php (modified) (1 diff)

trunk/src/wp-includes/http.php

@@ -551 +551 @@
                         $ip = gethostbyname( $host );
                         if ( $ip === $host ) { // Error condition for gethostbyname()
-                                $ip = false;
+                                return false;
                         }
                 }