Changeset 46493 for branches/4.9/src/wp-includes/class-wp-query.php

Timestamp:

10/14/2019 06:38:34 PM (7 years ago)

Author:

whyisjake

Message:

Backporting several bug fixes.

• Query: Remove the static query property.
• HTTP API: Protect against hex interpretation.
• Filesystem API: Prevent directory travelersals when creating new folders.
• Administration: Ensure that admin referer nonce is valid.
• REST API: Send a Vary: Origin header on GET requests.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 5.0 branch.

File:

• branches/4.9/src/wp-includes/class-wp-query.php (modified) (2 diffs)

branches/4.9/src/wp-includes/class-wp-query.php

@@ -530 +530 @@
                         , 'attachment_id'
                         , 'name'
-                        , 'static'
                         , 'pagename'
                         , 'page_id'
@@ -765 +764 @@
                         // post is being queried.
                         $this->is_single = true;
-                } elseif ( '' != $qv['static'] || '' != $qv['pagename'] || !empty($qv['page_id']) ) {
+                } elseif ( '' != $qv['pagename'] || !empty($qv['page_id']) ) {
                         $this->is_page = true;
                         $this->is_single = false;