[wp-trac] [WordPress Trac] #33498: get_home_path does not stripslashes $_SERVER['SCRIPT_FILENAME'] before using it

WordPress Trac noreply at wordpress.org
Sat Aug 22 04:34:36 UTC 2015


#33498: get_home_path does not stripslashes $_SERVER['SCRIPT_FILENAME'] before
using it
----------------------------------------+------------------------------
 Reporter:  handsomejack201             |       Owner:
     Type:  defect (bug)                |      Status:  new
 Priority:  normal                      |   Milestone:  Awaiting Review
Component:  General                     |     Version:  4.3
 Severity:  normal                      |  Resolution:
 Keywords:  has-patch needs-unit-tests  |     Focuses:
----------------------------------------+------------------------------

Comment (by dd32):

 FYI this should use `wp_unslash()` rather than `stripslashes()` directly
 for that distant day in the future when we're no longer forced to slash
 the globals.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/33498#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list