[wp-trac] [WordPress Trac] #64560: Function get_stylesheet_directory_uri() can expose server path when using a theme directory outside the document root (was: Speculative Loading API can expose server path when using a theme directory outside the document root)
WordPress Trac
noreply at wordpress.org
Thu Jan 29 23:07:44 UTC 2026
#64560: Function get_stylesheet_directory_uri() can expose server path when using a
theme directory outside the document root
--------------------------+------------------------------
Reporter: emrl | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version:
Severity: normal | Resolution:
Keywords: | Focuses:
--------------------------+------------------------------
Changes (by westonruter):
* focuses: performance =>
* version: 6.8 =>
Comment:
OK, since this isn't specific to Speculative Loading, I'm making this more
general to be about `get_stylesheet_directory_uri()`.
Providing more details (e.g. sample code) about how specifically you are
registering your theme root would be helpful for others looking to
reproduce the issue.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/64560#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list