[wp-trac] [WordPress Trac] #39373: url_to_postid() returning postid for external url

[WordPress Trac]

#39373: url_to_postid() returning postid for external url
--------------------------+------------------------------
 Reporter:  jkhongusc     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Embeds        |     Version:  4.5.3
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------
Changes (by swissspidy):

 * version:  4.7 => 4.5.3


Comment:

 Hey there,

 Thanks for your report. This seems like a duplicate of #37359, but yet I
 haven't been able to reproduce this in a unit test.

 However, I can see that `url_to_postid()` doesn't really check if the
 domain matches, so there is a potential for false positives. Such a check
 might need to be added to `wp_filter_pre_oembed_result()` or
 `url_to_postid()` directly.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/39373#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform