[wp-trac] [WordPress Trac] #62044: WP allows to inject random strings into archive page urls, still returning 200

[WordPress Trac]

#62044: WP allows to inject random strings into archive page urls, still returning
200
------------------------------+------------------------------
 Reporter:  paulschiretz      |       Owner:  (none)
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  Awaiting Review
Component:  Query             |     Version:
 Severity:  critical          |  Resolution:
 Keywords:  has-testing-info  |     Focuses:
------------------------------+------------------------------
Changes (by hellofromTonya):

 * keywords:  needs-patch => has-testing-info
 * version:  6.6.2 =>


Comment:

 Hello @paulschiretz,

 Welcome to WordPress Core Trac.

 I'm doing triage today on 6.6.x releases by determining if the reported
 bug was introduced in the marked 6.6.x (e.g. 6.6.2) release.

 The terms query was not changed in 6.6.2. In reviewing the
 [https://core.trac.wordpress.org/query?status=closed&id=!61982&milestone=6.6.2&group=status&col=id&col=summary&col=owner&col=type&col=priority&col=component&col=version&col=keywords&order=id
 6.6.2 changes], I'm seeing any that appear to affect what is being
 reported here in this ticket.

 For now, I'm removing the `Version` (meaning the release that introduced
 the bug). Once this issue is investigated and its root cause found, the
 `Version` can/should/will be updated for contextual purposes.

 Other triage changes:

 - Adding `has-testing-info` keyword, as the step-by-step instructions on
 how to reproduced are in the description. Thank you for providing these
 instructions.

 - Removing the `needs-patch` keyword, until the report is investigated and
 determined a fix is needed in Core.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62044#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform