WordPress.org

Make WordPress Core

Changeset 46480


Ignore:
Timestamp:
10/14/2019 03:51:55 PM (5 weeks ago)
Author:
whyisjake
Message:

HTTP API: Protect against hex interpretation.

Return earlier from wp_http_validate_url().

Props: iandunn, xknown, voldemortensen, whyisjake.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/5.2/src/wp-includes/http.php

    r42894 r46480  
    556556            $ip = gethostbyname( $host );
    557557            if ( $ip === $host ) { // Error condition for gethostbyname()
    558                 $ip = false;
     558                return false;
    559559            }
    560560        }
Note: See TracChangeset for help on using the changeset viewer.