Wordpress/tests/phpunit/tests/xmlrpc
Dion Hulse 75ab50c70e XMLRPC: Prevent authentication from occuring after a failed authentication attmept in any single XML-RPC call.
This hardens WordPress against a common vector which uses multiple user identifiers in a single `system.multicall` call. In the event that authentication fails, all following authentication attempts ''in that call'' will also fail.

Props dd32, johnbillion.
Fixes #34336


git-svn-id: https://develop.svn.wordpress.org/trunk@35366 602fd350-edb4-49c9-b593-d223f7449a82
2015-10-23 04:45:10 +00:00
..
mt Unit Tests: after [35225], make factory a method/getter on WP_UnitTestCase and add magic methods for BC for every plugin that is extending WP_UnitTestCase and accessing the $factory instance prop. 2015-10-17 18:02:16 +00:00
mw Unit Tests: WP_UnitTest_Generator_Sequence needs a static incrementer - otherwise, it assumes every test class is a reset, which it no longer is (it is now static). 2015-10-17 19:24:20 +00:00
wp Unit Tests: consolidate the many separate implementations of _make_attachment() into a helper method on WP_UnitTestCase. 2015-10-21 01:58:52 +00:00
basic.php XMLRPC: Prevent authentication from occuring after a failed authentication attmept in any single XML-RPC call. 2015-10-23 04:45:10 +00:00
client.php Allow query strings for servers in IXR_Client and WP_HTTP_IXR_Client. 2014-03-15 05:00:27 +00:00