WordPress.org
Get WordPress

Make WordPress Core

Opened 21 years ago

Closed 21 years ago

Last modified 17 years ago

#1871 closed defect (bug) (invalid)

Redacted

Reported by: (none) Owned by:
Priority: high Milestone:
Component: Security Version: 1.5.2
Severity: normal Keywords:
Cc: Focuses:

Description (last modified by markjaquith)

Redacted

Change History (4)

#1 @davidhouse
21 years ago

Standard policy is to email security threats to security@…, so that the problem can be tested and acted on as quickly as possible, with the minimum number of people possible getting access to the threat.

#2 @markjaquith
21 years ago

Seems to me that it would be better to have the urlencode() protection within the wp_redirect() function itself...

#3 @markjaquith
21 years ago

  • Description modified (diff)
  • Reporter ManiacSoftwareManiacsOrg removed
  • Resolution → invalid
  • Status new → closed
  • Summary XSS vulnerability through redirects → Redacted

#4 @markjaquith
21 years ago

Let's not give the bad guys a head start. Information has been saved and forwarded to security@…

Note: See TracTickets for help on using tickets.