Make WordPress Core


Ignore:
Timestamp:
10/14/2019 07:08:52 PM (7 years ago)
Author:
whyisjake
Message:

Backporting several bug fixes.

  • Query: Remove the static query property.
  • HTTP API: Protect against hex interpretation.
  • Filesystem API: Prevent directory travelersals when creating new folders.
  • Administration: Ensure that admin referer nonce is valid.
  • REST API: Send a Vary: Origin header on GET requests.
  • Customizer: Properly sanitize background images.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 4.4 branch.

Location:
branches/4.4
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/4.4

  • branches/4.4/src/wp-includes/query.php

    r39959 r46498  
    14581458                        , 'attachment_id'
    14591459                        , 'name'
    1460                         , 'static'
    14611460                        , 'pagename'
    14621461                        , 'page_id'
    … …  
    16691668                        // post is being queried.
    16701669                        $this->is_single = true;
    1671                 } elseif ( '' != $qv['static'] || '' != $qv['pagename'] || !empty($qv['page_id']) ) {
     1670                } elseif ( '' != $qv['pagename'] || !empty($qv['page_id']) ) {
    16721671                        $this->is_page = true;
    16731672                        $this->is_single = false;
Note: See TracChangeset for help on using the changeset viewer.