[wp-trac] [WordPress Trac] #24201: Error in RegEx for proxy excluded URL in function send_through_proxy

WordPress Trac noreply at wordpress.org
Wed Aug 28 20:18:07 UTC 2013


#24201: Error in RegEx for proxy excluded URL in function send_through_proxy
--------------------------+---------------------
 Reporter:  erich1978     |       Owner:  dd32
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:  3.7
Component:  HTTP          |     Version:  3.1
 Severity:  normal        |  Resolution:  fixed
 Keywords:                |
--------------------------+---------------------

Comment (by dd32):

 > The change to .+ seems like it would also allow for
 some.subdomain.example.com to be whitelisted for *.example.com. If
 intended, that's all good, just checking.

 Yes, that was already possible, since it was `[\w.]+`, The only change in
 behaviour is that now non-words (`\W`)  are allowed in subdomains. I can't
 think of any failures here, but we might need to change it to a larger
 ASCII whitelist if there are any bad characters which can trick our string
 functions, etc.

--
Ticket URL: <http://core.trac.wordpress.org/ticket/24201#comment:5>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list