[wp-trac] [WordPress Trac] #10360: $_REQUEST's slashes may differ from $_GET/$_POST
WordPress Trac
wp-trac at lists.automattic.com
Sat Jul 11 10:09:39 UTC 2009
#10360: $_REQUEST's slashes may differ from $_GET/$_POST
--------------------------+-------------------------------------------------
Reporter: dd32 | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: 2.8.2
Component: Security | Version: 2.8
Severity: normal | Keywords: dev-feedback
--------------------------+-------------------------------------------------
Comment(by Denis-de-Bernardy):
hehe, as I wrote, it's "in case we want to keep $_REQUEST with the same
data all along" (which I don't think we do either).
@hakre: ticket is not invalid, and not slashing $_REQUEST can introduce
potential security issues if a plugin uses it expecting it's always
slashed.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/10360#comment:23>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list