Changeset 58470 for trunk/src/wp-includes/functions.php

Timestamp:

06/24/2024 02:36:22 PM (2 years ago)

Author:

audrasjb

Message:

Editor: Fix Path Traversal issue on Windows in Template-Part Block.

Props xknown.

File:

• trunk/src/wp-includes/functions.php (modified) (1 diff)

trunk/src/wp-includes/functions.php

@@ -6200 +6200 @@
         }
 
+        // Normalize path for Windows servers
+        $file = wp_normalize_path( $file );
+
         // `../` on its own is not allowed:
         if ( '../' === $file ) {