[wp-trac] [WordPress Trac] #36320: PayPal 2016 merchant security upgrades - Core defaults need to be changed

[WordPress Trac]

#36320: PayPal 2016 merchant security upgrades - Core defaults need to be changed
--------------------------+------------------------
 Reporter:  reidbusi      |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  General       |     Version:  4.4.2
 Severity:  normal        |  Resolution:  duplicate
 Keywords:                |     Focuses:
--------------------------+------------------------

Comment (by reidbusi):

 Yes, I am looking at

 {{{#!php
 <?php
 do_action_ref_array( 'http_api_curl', array( &$handle, $r, $url ) );
 }}}

 in class-wp-http-curl.php right now, to create a plugin to fix it.

 I guess you are correct, WooCommerce needs to address this, but they hand
 it off to WP core:
 https://docs.woothemes.com/document/paypal-update-for-sha-256/
 https://gist.github.com/mikejolley/0941e0882efcad64ea40

 While you guys all argue over who has to get off their ass and fix it. I
 will just do it myself. I might release the plugin, but given the attitude
 I see on this subject I may not and just let the zillions of WooCommerce
 sites affected by this fail.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36320#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform