[wp-trac] [WordPress Trac] #47980: New wp_validate_redirect() removes domain in some circumstances.

WordPress Trac noreply at wordpress.org
Fri Sep 13 15:54:21 UTC 2019


#47980: New wp_validate_redirect() removes domain in some circumstances.
--------------------------+-----------------------------
 Reporter:  rconde        |       Owner:  SergeyBiryukov
     Type:  defect (bug)  |      Status:  assigned
 Priority:  normal        |   Milestone:  5.2.4
Component:  General       |     Version:  5.2.3
 Severity:  critical      |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+-----------------------------

Comment (by Sixes):

 Thank you so much for that response @rconde, it was very helpful.

 However it doesn't seem to have fixed the problem.  I have now turned on
 development mode and cleared the Cloudflare cache.  I'm still getting the
 same issue.

 Digging a little further using curl, I find that WordPress appears to be
 setting a slew of cookies on login but these all have the domain
 {{{.blog.me.uk}}} which is the "parent" domain for the Wordpress
 install.For example:

 {{{
 set-cookie: wordpress_test_cookie=WP+Cookie+check; path=/;
 domain=.blog.me.uk; secure
 }}}

 As I understand it, this cookie will not be sent back whilst accessing the
 https://fearoflanding.com domain.  I assume it is the lack of this cookie
 (or one of the other cookies with the same domain) that is causing the
 issue.

 Any more ideas?  I really appreciate the help.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47980#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list