[wp-cvs] wordpress xmlrpc.php,1.66,1.67

Matthew Mullenweg saxmatt at users.sourceforge.net
Thu Jun 10 04:55:00 CDT 2004


Update of /cvsroot/cafelog/wordpress
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv4557

Modified Files:
	xmlrpc.php 
Log Message:
We need to sanitize pingbacks.

Index: xmlrpc.php
===================================================================
RCS file: /cvsroot/cafelog/wordpress/xmlrpc.php,v
retrieving revision 1.66
retrieving revision 1.67
diff -C2 -d -r1.66 -r1.67
*** xmlrpc.php	31 May 2004 23:26:46 -0000	1.66
--- xmlrpc.php	10 Jun 2004 09:54:58 -0000	1.67
***************
*** 1677,1681 ****
  					$title = (!strlen($matchtitle[1])) ? $pagelinkedfrom : $matchtitle[1];
  					$original_context = $context;
! 					$context = '<pingback />[...] '.addslashes(trim($context)) .' [...]';
  					$context = format_to_post($context);
  					$original_pagelinkedfrom = $pagelinkedfrom;
--- 1677,1684 ----
  					$title = (!strlen($matchtitle[1])) ? $pagelinkedfrom : $matchtitle[1];
  					$original_context = $context;
! 					$context = '<pingback />[...] ';
! 					$context = strip_tags($context);
! 					$context = htmlspecialchars($context);
! 					$context .= ' [...]';
  					$context = format_to_post($context);
  					$original_pagelinkedfrom = $pagelinkedfrom;




More information about the cvs mailing list