Changeset 14489 for sites/trunk/api.wordpress.org/public_html/dotorg/trac/oembed/index.php

Timestamp:

07/24/2025 01:38:04 AM (9 months ago)

Author:

dd32

Message:

API: Trac helpers: Avoid fatals with invalid inputs.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/trac/oembed/index.php (modified) (2 diffs)

sites/trunk/api.wordpress.org/public_html/dotorg/trac/oembed/index.php

@@ -25 +25 @@
 header( 'X-WP-Embed: true' );
 
-$url = wp_unslash( $_REQUEST['url'] ?? '' );
+$url = $_REQUEST['url'] ?? '';
+$url = is_string( $url ) ? wp_unslash( $url ) : '';
 
 header( 'Allow: GET' );
@@ -31 +32 @@
 
 if (
+    ! $url ||
+    'GET' !== $_SERVER['REQUEST_METHOD'] ||
     // meta|core are the only tracs embedable.
     // milestone|ticketgraph|ticket|changeset are the only endpoints allowable.
-    ! preg_match( '!^(?P<baseurl>https://(?P<trac>meta|core).trac.wordpress.org/)(?P<type>milestone|ticketgraph|ticket|changeset|query)([/?]|$)!i', $url, $m ) ||
-    'GET' !== $_SERVER['REQUEST_METHOD']
+    ! preg_match( '!^(?P<baseurl>https://(?P<trac>meta|core).trac.wordpress.org/)(?P<type>milestone|ticketgraph|ticket|changeset|query)([/?]|$)!i', $url, $m )
 ) {
     header( 'HTTP/1.1 404 Not Found', true, 404 );