Make WordPress Core

Changeset 58470


Ignore:
Timestamp:
06/24/2024 02:36:22 PM (6 months ago)
Author:
audrasjb
Message:

Editor: Fix Path Traversal issue on Windows in Template-Part Block.

Props xknown.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/src/wp-includes/functions.php

    r58430 r58470  
    62006200    }
    62016201
     6202    // Normalize path for Windows servers
     6203    $file = wp_normalize_path( $file );
     6204
    62026205    // `../` on its own is not allowed:
    62036206    if ( '../' === $file ) {
Note: See TracChangeset for help on using the changeset viewer.