Context Navigation

class-validator.php

Timestamp:

11/05/2020 03:37:13 AM (6 years ago)

Author:

dd32

Message:

Plugin Directory: Readme Parser: Allow a File, URL, or now the raw readme contents to be passed to the Readme Parser.

This eases integration and re-use of the parser for other purposes.

File:

-              r10277
+              r10429
         public function validate_content( $readme ) {
+                // Security note: Keep the data: protocol here, Parser accepts a string HOWEVER
+                // if a submitted readme.txt URL contents were to contain a file or URL-like string,
+                // it could bypass the protections above in validate_url().
                 $readme = new Parser( 'data:text/plain,' . urlencode( $readme ) );

Note: See TracChangeset for help on using the changeset viewer.