Changeset 58488 for branches/5.4/src/wp-includes/functions.php

Timestamp:

06/24/2024 03:35:29 PM (5 months ago)

Author:

audrasjb

Message:

Editor: Fix Path Traversal issue on Windows in Template-Part Block.

Merges [58470] to the 5.4 branch.
Props xknown, jorbin.

File:

• branches/5.4/src/wp-includes/functions.php (modified) (1 diff)

branches/5.4/src/wp-includes/functions.php

@@ -5297 +5297 @@
  */
 function validate_file( $file, $allowed_files = array() ) {
+    // Normalize path for Windows servers
+    $file = wp_normalize_path( $file );
+
     // `../` on its own is not allowed:
     if ( '../' === $file ) {