Make WordPress Core


Ignore:
Timestamp:
10/14/2019 07:29:52 PM (7 years ago)
Author:
whyisjake
Message:

Backporting several bug fixes.

  • Query: Remove the static query property.
  • HTTP API: Protect against hex interpretation.
  • Filesystem API: Prevent directory travelersals when creating new folders.
  • Administration: Ensure that admin referer nonce is valid.
  • REST API: Send a Vary: Origin header on GET requests.
  • Customizer: Properly sanitize background images.

Backports [46474], [46475], [46476], [46477], [46478], [46483], [46485] to the 3.8 branch.

Location:
branches/3.8
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/3.8

  • branches/3.8/src/wp-includes/http.php

    r37122 r46504  
    477477                } else {
    478478                        $ip = gethostbyname( $host );
    479                         if ( $ip === $host ) // Error condition for gethostbyname()
    480                                 $ip = false;
     479                        if ( $ip === $host ) { // Error condition for gethostbyname()
     480                                return false;
     481                        }
    481482                }
    482483                if ( $ip ) {
Note: See TracChangeset for help on using the changeset viewer.