Changeset 1150 for sites/trunk/wordpress.org/public_html/wp-content/plugins/theme-directory/class-wporg-themes-upload.php

Timestamp:

01/16/2015 02:03:30 AM (10 years ago)

Author:

obenland

Message:

Theme Directory: Prevent URL parameters from being used as theme slugs.

See #745.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/theme-directory/class-wporg-themes-upload.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/theme-directory/class-wporg-themes-upload.php

@@ -372 +372 @@
         );
 
-        // Reserve "twenty" names for wordpressdotorg.
         $reserved_slugs = array(
+            // Reserve "twenty" names for wordpressdotorg.
             'twentyten', 'twentyeleven', 'twentytwelve','twentythirteen', 'twentyfourteen', 'twentyfifteen',
             'twentysixteen', 'twentyseventeen','twentyeighteen', 'twentynineteen', 'twentytwenty',
+
+            // Theme Showcase URL parameters.
+            'browse', 'tag', 'search', 'filter', 'upload', 'commercial',
+            'featured', 'popular', 'new', 'updated',
         );