[wp-trac] [WordPress Trac] #26790: rss feed widget not working

WordPress Trac noreply at wordpress.org
Wed Jan 8 23:46:14 UTC 2014


#26790: rss feed widget not working
--------------------------+----------------------
 Reporter:  weetouches    |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Feeds         |     Version:  3.8
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |
--------------------------+----------------------
Changes (by dd32):

 * status:  reopened => closed
 * resolution:   => invalid


Comment:

 still invalid, you have two options:

 1. Make the domains resolve to their external IP(s) instead of 192.168.x
 2. Allow connections to 192.168.x through the usage of the
 `http_request_host_is_external` filter as mentioned above.

 example of the filter:
 {{{
 add_filter( 'http_request_host_is_external',
 '_filter_http_request_host_is_external', 10, 3 );
 function _filter_http_request_host_is_external( $external, $host, $url ) {
    if ( ! $external )
       return $external;
    $ip = gethostbyname( $host );
    if ( '192.168.123.123' == $ip )
       $external = true;
    return $external;
 }
 }}}

 Note, that this is potentially insecure due to allowing malicious
 attackers to make WordPress make a HTTP request to a local server resource
 they shouldn't have access to, which is why having the domains resolve to
 an external IP is better.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/26790#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list