[wp-trac] [WordPress Trac] #8910: Limit the RSS widget from using its own url
WordPress Trac
wp-trac at lists.automattic.com
Tue Jan 11 21:37:15 UTC 2011
#8910: Limit the RSS widget from using its own url
-------------------------------------------------+-------------------------
Reporter: webmaestro | Owner:
Type: defect (bug) | Status: reopened
Priority: high | Milestone: Future
Component: Widgets | Release
Severity: major | Version: 2.8
Keywords: needs-patch, rss, widget, url, | Resolution:
HTTP/1.0, server, loop, feed, recent posts, |
archive |
-------------------------------------------------+-------------------------
Comment (by nacin):
(In [17260]) Disallow a self-reference on RSS widget save, which would DoS
a site. Checking home/siteurl should cover the vast majority of cases. see
#8910.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/8910#comment:13>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list