Changeset 46475

Timestamp:

10/14/2019 03:25:38 PM (5 years ago)

Author:

whyisjake

Message:

HTTP API: Protect against hex interpretation.

Return earlier from wp_http_validate_url().

Props: iandunn, xknown, voldemortensen, whyisjake.

File:

• trunk/src/wp-includes/http.php (modified) (1 diff)

trunk/src/wp-includes/http.php

@@ -551 +551 @@
             $ip = gethostbyname( $host );
             if ( $ip === $host ) { // Error condition for gethostbyname()
-                $ip = false;
+                return false;
             }
         }