diff --git a/wp-includes/functions.php b/wp-includes/functions.php index 56c3d94bf5..3267120b6f 100644 --- a/wp-includes/functions.php +++ b/wp-includes/functions.php @@ -1976,7 +1976,9 @@ function wp_get_referer() { } /** - * Retrieves unvalidated referer from '_wp_http_referer' or HTTP referer. + * Retrieves unvalidated referer from the '_wp_http_referer' URL query variable or the HTTP referer. + * + * If the value of the '_wp_http_referer' URL query variable is not a string then it will be ignored. * * Do not use for redirects, use wp_get_referer() instead. * @@ -1985,7 +1987,7 @@ function wp_get_referer() { * @return string|false Referer URL on success, false on failure. */ function wp_get_raw_referer() { - if ( ! empty( $_REQUEST['_wp_http_referer'] ) ) { + if ( ! empty( $_REQUEST['_wp_http_referer'] ) && is_string( $_REQUEST['_wp_http_referer'] ) ) { return wp_unslash( $_REQUEST['_wp_http_referer'] ); } elseif ( ! empty( $_SERVER['HTTP_REFERER'] ) ) { return wp_unslash( $_SERVER['HTTP_REFERER'] ); diff --git a/wp-includes/version.php b/wp-includes/version.php index 3275d74b07..fa716b8dec 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -16,7 +16,7 @@ * * @global string $wp_version */ -$wp_version = '6.3-beta2-56114'; +$wp_version = '6.3-beta2-56115'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.