Changeset 49475 for trunk/src/wp-includes/user.php

Timestamp:

11/02/2020 06:40:06 PM (5 years ago)

Author:

helen

Message:

Privacy: More precise checking of user request action names.

Props garrett-eclipse.
Fixes #46536.

File:

• trunk/src/wp-includes/user.php (modified) (1 diff)

trunk/src/wp-includes/user.php

@@ -3774 +3774 @@
     }
 
-    if ( ! $action_name ) {
+    if ( ! in_array( $action_name, _wp_privacy_action_request_types(), true ) ) {
         return new WP_Error( 'invalid_action', __( 'Invalid action name.' ) );
     }