Changeset 46480

Timestamp:

10/14/2019 03:51:55 PM (4 years ago)

Author:

whyisjake

Message:

HTTP API: Protect against hex interpretation.

Return earlier from wp_http_validate_url().

Props: iandunn, xknown, voldemortensen, whyisjake.

File:

• branches/5.2/src/wp-includes/http.php (modified) (1 diff)

branches/5.2/src/wp-includes/http.php

@@ -556 +556 @@
             $ip = gethostbyname( $host );
             if ( $ip === $host ) { // Error condition for gethostbyname()
-                $ip = false;
+                return false;
             }
         }