sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

wp_allowed_protocols() should not contain 'data', as it is not safe. see #19354.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@25301 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2013-09-08 19:41:14 +00:00
parent bde3435a63
commit 7f7aacbdec
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
tests/phpunit/tests/functions.php
View File

@ -355,4 +355,11 @@ class Tests_Functions extends WP_UnitTestCase {
array( array( 1, 2, 3, 4 ), array( -1, 2, '-3', '4' ) ), array( array( 1, 2, 3, 4 ), array( -1, 2, '-3', '4' ) ),
); );
} }
/**
* @ticket 19354
*/
function test_data_is_not_an_allowed_protocol() {
$this->assertNotContains( 'data', wp_allowed_protocols() );
}
} }