[wp-trac] [WordPress Trac] #8593: HTTP_HOST being manipulated improperly for redirects

WordPress Trac wp-trac at lists.automattic.com
Tue Jun 22 04:37:52 UTC 2010


#8593: HTTP_HOST being manipulated improperly for redirects
--------------------------+-------------------------------------------------
 Reporter:  revmj         |       Owner:  markjaquith                  
     Type:  defect (bug)  |      Status:  new                          
 Priority:  normal        |   Milestone:  Future Release               
Component:  Canonical     |     Version:                               
 Severity:  normal        |    Keywords:  reporter-feedback needs-patch
--------------------------+-------------------------------------------------
Changes (by chiether):

 * cc: chiether (added)


Comment:

 Im looking some "Redirect Loop" tickets however set duplicate.

 Some browser has been infinity redirect; because send "Host:
 example.com:443" when access to "https://example.com/"
 I think more better $requested_url should be confirmed HttpHeader and with
 DefaultPort(80,443).

 target(in v3.0):
   ./wp-includes/canonical.php:45
     * make $requested_url by $_SERVER['HTTPS'], $_SERVER['HTTP_HOST'] and
 $_SERVER['REQUEST_URI'].
   ./wp-includes/canonical.php:344
     * conditional branch to return false. ( $redirect_url ==
 $requested_url )

 ...affect this ticket?

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/8593#comment:8>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list