WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Properly delimit URLs by \r, \n, \t *or* a space in sanitize_trackback_urls(). Fixes multiple trackback URL usage. props SergeyBiryukov, fixes #21624 for trunk. 

git-svn-id: http://core.svn.wordpress.org/trunk@21718 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Andrew Nacin 2012-09-04 03:36:19 +00:00
parent b1dcde1798
commit e75671452c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-includes/formatting.php
View File

@ -3235,7 +3235,7 @@ function sanitize_mime_type( $mime_type ) {
* @return string URLs starting with the http or https protocol, separated by a carriage return. * @return string URLs starting with the http or https protocol, separated by a carriage return.
*/ */
function sanitize_trackback_urls( $to_ping ) { function sanitize_trackback_urls( $to_ping ) {
$urls_to_ping = preg_split( '/\r\n\t /', trim( $to_ping ), -1, PREG_SPLIT_NO_EMPTY ); $urls_to_ping = preg_split( '/[\r\n\t ]/', trim( $to_ping ), -1, PREG_SPLIT_NO_EMPTY );
foreach ( $urls_to_ping as $k => $url ) { foreach ( $urls_to_ping as $k => $url ) {
if ( !preg_match( '#^https?://.#i', $url ) ) if ( !preg_match( '#^https?://.#i', $url ) )
unset( $urls_to_ping[$k] ); unset( $urls_to_ping[$k] );