WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Customizer: Use `hash_equals()` for widgets. 

Merge of [33535] to the 4.2 branch.
Built from https://develop.svn.wordpress.org/branches/4.2@33536


git-svn-id: http://core.svn.wordpress.org/branches/4.2@33503 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Dominik Schilling 2015-08-04 04:52:16 +00:00
parent ddf451dbb5
commit 008c4fe3c4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-includes/class-wp-customize-widgets.php
View File

@ -1124,7 +1124,7 @@ final class WP_Customize_Widgets {
return null; return null;
} }
if ( $this->get_instance_hash_key( $decoded ) !== $value['instance_hash_key'] ) { if ( ! hash_equals( $this->get_instance_hash_key( $decoded ), $value['instance_hash_key'] ) ) {
return null; return null;
} }