Changeset 56842 for branches/6.3/src/wp-includes/Requests/src/Iri.php

Timestamp:

10/12/2023 01:20:35 PM (2 years ago)

Author:

audrasjb

Message:

Prevent unintended behavior when certain objects are unserialized.

Props ehtis, xknown.
Merges [56835] to the 6.3 branch.

Location:

branches/6.3

Files:

• . (modified) (1 prop)
• src/wp-includes/Requests/src/Iri.php (modified) (1 diff)

branches/6.3/src/wp-includes/Requests/src/Iri.php

@@ -718 +718 @@
     }
 
+    public function __wakeup() {
+        $class_props = get_class_vars( __CLASS__ );
+        $string_props = array( 'scheme', 'iuserinfo', 'ihost', 'port', 'ipath', 'iquery', 'ifragment' );
+        $array_props = array( 'normalization' );
+        foreach ( $class_props as $prop => $default_value ) {
+            if ( in_array( $prop, $string_props, true ) && ! is_string( $this->$prop ) ) {
+                throw new UnexpectedValueException();
+            } elseif ( in_array( $prop, $array_props, true ) && ! is_array( $this->$prop ) ) {
+                throw new UnexpectedValueException();
+            }
+            $this->$prop = null;
+        }
+    }
+
     /**
      * Set the entire IRI. Returns true on success, false on failure (if there