[wp-trac] [WordPress Trac] #24092: Embed handlers for the audio and video shortcodes are too permissive

WordPress Trac noreply at wordpress.org
Mon Apr 15 15:43:59 UTC 2013


#24092: Embed handlers for the audio and video shortcodes are too permissive
-----------------------+--------------------------
 Reporter:  kovshenin  |       Type:  defect (bug)
   Status:  new        |   Priority:  normal
Milestone:  3.6        |  Component:  Media
  Version:  trunk      |   Severity:  normal
 Keywords:  has-patch  |
-----------------------+--------------------------
 The regex patterns in the audio and video embed handlers introduced in
 [23729], do not contain the beginning and end of string markers (^ and $)
 and will thus match things such as:

 {{{
 http://example.org/wp-content/uploads/directory.mp3/file.php
 }}}

 Not a big deal, but it probably shouldn't.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/24092>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list