[wp-trac] [WordPress Trac] #24092: Embed handlers for the audio and video shortcodes are too permissive

[WordPress Trac]

#24092: Embed handlers for the audio and video shortcodes are too permissive
--------------------------+--------------------
 Reporter:  kovshenin     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.6
Component:  Media         |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |
--------------------------+--------------------
Description changed by kovshenin:

Old description:

> The regex patterns in the audio and video embed handlers introduced in
> [23729], do not contain the beginning and end of string markers (^ and $)
> and will thus match things such as:
>
> {{{
> http://example.org/wp-content/uploads/directory.mp3/file.php
> }}}
>
> Not a big deal, but it probably shouldn't.

New description:

 The regex patterns in the audio and video embed handlers introduced in
 [23729], do not contain the beginning and end of string markers (`^` and
 `$`) and will thus match things such as:

 {{{
 http://example.org/wp-content/uploads/directory.mp3/file.php
 }}}

 Not a big deal, but it probably shouldn't.

--

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/24092#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software