[wp-trac] Re: [WordPress Trac] #4819: wp_redirect() Input Validation Bypass Vulnerability / Filter Bypass Vulnerability

WordPress Trac wp-trac at lists.automattic.com
Tue Aug 28 19:53:08 GMT 2007


#4819: wp_redirect() Input Validation Bypass Vulnerability / Filter Bypass
Vulnerability
---------------------------------------------------------------------+------
 Reporter:  hakre                                                    |        Owner:  anonymous
     Type:  defect                                                   |       Status:  new      
 Priority:  normal                                                   |    Milestone:  2.2.3    
Component:  Security                                                 |      Version:  2.2.2    
 Severity:  normal                                                   |   Resolution:           
 Keywords:  has-patch security validation-bypass input dev-reviewed  |  
---------------------------------------------------------------------+------
Changes (by markjaquith):

  * keywords:  has-patch security validation-bypass input => has-patch
               security validation-bypass input dev-reviewed

Comment:

 Looks good to me.  I tested with nested values like {{{%0%0%0ada}}} and it
 recursively killed them all.

 +1

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4819#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list