sergiotarxz
/
Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Some sanity checks for parse_url in do_enclose. props miqrogroove, fixes #11029 

git-svn-id: https://develop.svn.wordpress.org/trunk@14116 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2010-04-16 19:48:30 +00:00
parent 65f1f09e69
commit 55b9eedb4b
1 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
wp-includes/functions.php
View File

@ -1197,7 +1197,9 @@ function do_enclose( $content, $post_ID ) {
foreach ( (array) $post_links_temp[0] as $link_test ) {
if ( !in_array( $link_test, $pung ) ) { // If we haven't pung it already
$test = parse_url( $link_test );
$test = @parse_url( $link_test );
if ( false === $test )
continue;
if ( isset( $test['query'] ) )
$post_links[] = $link_test;
elseif ( $test['path'] != '/' && $test['path'] != '' )
@ -1215,7 +1217,8 @@ function do_enclose( $content, $post_ID ) {
// Check to see if we can figure out the mime type from
// the extension
$url_parts = parse_url( $url );
$url_parts = @parse_url( $url );
if ( false !== $url_parts ) {
$extension = pathinfo( $url_parts['path'], PATHINFO_EXTENSION );
if ( !empty( $extension ) ) {
foreach ( get_allowed_mime_types( ) as $exts => $mime ) {
@ -1225,6 +1228,7 @@ function do_enclose( $content, $post_ID ) {
}
}
}
}
if ( in_array( substr( $type, 0, strpos( $type, "/" ) ), $allowed_types ) ) {
$meta_value = "$url\n$len\n$type\n";