Changeset 46480 for branches/5.2

Timestamp:

10/14/2019 03:51:55 PM (7 years ago)

Author:

whyisjake

Message:

HTTP API: Protect against hex interpretation.

Return earlier from wp_http_validate_url().

Props: iandunn, xknown, voldemortensen, whyisjake.

File:

• branches/5.2/src/wp-includes/http.php (modified) (1 diff)

branches/5.2/src/wp-includes/http.php

@@ -556 +556 @@
                         $ip = gethostbyname( $host );
                         if ( $ip === $host ) { // Error condition for gethostbyname()
-                                $ip = false;
+                                return false;
                         }
                 }