Changeset 12425

Timestamp:

02/27/2023 02:06:17 AM (2 years ago)

Author:

dd32

Message:

Plugin Directory: API: Reject info requests which send an invalid slug payload (Such as an array of slugs in the singular-slug field).

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/standalone/class-plugins-info-api-request.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/standalone/class-plugins-info-api-request.php

@@ -312 +312 @@
             }
 
+            if ( ! empty( $this->args->slug ) && ! is_string( $this->args->slug ) ) {
+                return false;
+            }
+
             if ( ! is_string( $this->locale ) ) {
                 return false;