[wp-trac] [WordPress Trac] #36320: PayPal 2016 merchant security upgrades - Core defaults need to be changed

[WordPress Trac]

#36320: PayPal 2016 merchant security upgrades - Core defaults need to be changed
--------------------------+------------------------------
 Reporter:  reidbusi      |       Owner:
     Type:  defect (bug)  |      Status:  reopened
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  HTTP API      |     Version:  4.4.2
 Severity:  major         |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by reidbusi):

 Replying to [comment:11 mozzak]:

 Here is a plugin that contains this "fix":
 https://drive.google.com/file/d/0BzyS7-wCVjeOdVBrUHB6ZVZUNzg/view?usp=sharing

 DISCLAIMER: I take no responsibility or liability if this causes your
 server to explode, catch on fire and burn down the data centre,
 instantiate a singularity and cause the universe to implode (or anything
 else bad that might happen).

 I have only tested this on one of my development sites and it is working
 for me on my host and does not appear to have broken anything else. There
 is no guarantee it will work for you (though I expect it will). There is
 no guarantee it will not break something else on your site (though I
 expect it will not).

 If you do use it, please use it on a development/testing site and backup
 your database and files before installing it.

 I have not submitted it to the WordPress plugin repository and I'm not
 sure I will bother since it is so small (big effect though). Though if a
 fix with equivalent results is not included in the next WordPress release
 I may do so, since many thousands of eCommerce site will still be broken.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/36320#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform