[wp-trac] [WordPress Trac] #56141: Enhance installer security

WordPress Trac noreply at wordpress.org
Sun Dec 31 11:23:02 UTC 2023


#56141: Enhance installer security
--------------------------+-----------------------------
 Reporter:  smitka        |       Owner:  (none)
     Type:  enhancement   |      Status:  new
 Priority:  high          |   Milestone:  Future Release
Component:  Security      |     Version:
 Severity:  major         |  Resolution:
 Keywords:  dev-feedback  |     Focuses:
--------------------------+-----------------------------

Comment (by lordgurke):

 @Michi91 the `wp_is_dbhost_in_private_network` function is missing all
 IPv6 space. This would be an issue on our installations.
 The following prefixes should be added to be treated as private:
 * `fe80::/10`
 * `fc00::/7`
 But this should only be additional to the values of the ENV variable as
 proposed in the first post of the ticket, making it more suitable for
 shared hosting environments.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/56141#comment:15>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list