Changeset 58495 for branches/4.7/src/wp-includes/functions.php

Timestamp:

06/24/2024 03:46:05 PM (2 years ago)

Author:

audrasjb

Message:

Editor: Fix Path Traversal issue on Windows in Template-Part Block.

Merges [58470] to the 4.7 branch.
Props xknown, jorbin.

File:

• branches/4.7/src/wp-includes/functions.php (modified) (1 diff)

branches/4.7/src/wp-includes/functions.php

@@ -4354 +4354 @@
  */
 function validate_file( $file, $allowed_files = '' ) {
+        // Normalize path for Windows servers
+        $file = wp_normalize_path( $file );
+
         if ( false !== strpos( $file, '..' ) )
                 return 1;