Andrew Nacin 6894354b9b Additional checks when evaluating the safety of an HTTP request, to avoid false negatives. ...

* Check if the host is considered a safe redirect host.
 * Check if the host is another domain in a multisite installation.
 * Add a filter to control this.

This only occurs when the DNS resolution of a domain points elsewhere in an internal network, but only internally (and has its own public IP outside the network). This could be considered a bad configuration.

fixes #24646.



git-svn-id: https://develop.svn.wordpress.org/trunk@24915 602fd350-edb4-49c9-b593-d223f7449a82

2013-07-31 06:44:57 +00:00

14 KiB

Raw Blame History

View Raw