[wp-trac] [WordPress Trac] #64560: Function get_stylesheet_directory_uri() can expose server path when using a theme directory outside the document root (was: Speculative Loading API can expose server path when using a theme directory outside the document root)

WordPress Trac noreply at wordpress.org
Thu Jan 29 23:07:44 UTC 2026


#64560: Function get_stylesheet_directory_uri() can expose server path when using a
theme directory outside the document root
--------------------------+------------------------------
 Reporter:  emrl          |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------
Changes (by westonruter):

 * focuses:  performance =>
 * version:  6.8 =>


Comment:

 OK, since this isn't specific to Speculative Loading, I'm making this more
 general to be about `get_stylesheet_directory_uri()`.

 Providing more details (e.g. sample code) about how specifically you are
 registering your theme root would be helpful for others looking to
 reproduce the issue.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64560#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list