Changeset 14489 for sites/trunk/api.wordpress.org/public_html/dotorg/trac/pr/index.php

Timestamp:

07/24/2025 01:38:04 AM (11 months ago)

Author:

dd32

Message:

API: Trac helpers: Avoid fatals with invalid inputs.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/trac/pr/index.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/trac/pr/index.php

@@ -5 +5 @@
 require __DIR__ . '/functions.php';
 
-$trac          = preg_replace( '![^a-z]!', '', $_GET['trac'] ?? '' );
+$trac          = $_GET['trac'] ?? '';
+$trac          = is_string( $trac ) ? $trac : '';
+$trac          = preg_replace( '![^a-z]!', '', $trac );
 $ticket        = intval( $_GET['ticket'] ?? 0 );
 $author        = wp_unslash( $_GET['author'] ?? '' );
+$author        = is_string( $author ) ? $author : '';
 $authenticated = ! empty( $_GET['authenticated'] ); // Longer caches for logged out requests.