[wp-trac] [WordPress Trac] #44197: ZIP file containing a user’s personal data has user’s personal data in filename

WordPress Trac noreply at wordpress.org
Mon Jan 27 14:13:03 UTC 2020


#44197: ZIP file containing a user’s personal data has user’s personal data in
filename
-------------------------------------+---------------------
 Reporter:  Ov3rfly                  |       Owner:  (none)
     Type:  defect (bug)             |      Status:  new
 Priority:  normal                   |   Milestone:  5.4
Component:  Privacy                  |     Version:  4.9.6
 Severity:  normal                   |  Resolution:
 Keywords:  has-patch needs-refresh  |     Focuses:
-------------------------------------+---------------------
Changes (by xkon):

 * keywords:  has-patch => has-patch needs-refresh


Comment:

 Hey @donmhico, thanks for the patch!

 Since the `$stripped_email` is completely removed on your patch and not
 even used for an extra hash then I think that its assignment references
 that are on the same block can also be removed.

 {{{
 $stripped_email       = str_replace( '@', '-at-', $email_address );
 $stripped_email       = sanitize_title( $stripped_email ); // slugify the
 email address
 }}}

 As side notes, most likely phpunit tests will also need updating due to
 this name change and even though the exporter will first check out if a
 zip exists attached to the existing request and re-use that name it would
 be good to cross-test that to avoid breaking any existing sent e-mails :).

 Would you like to update the patch and take a look at unit tests as well?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44197#comment:11>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list