Changeset 4971

Timestamp:

02/21/2017 01:57:50 PM (8 years ago)

Author:

ocean90

Message:

WordPress.org SSO: Improve whitelist check for wp-json and xmlrpc.php to support query arguments.

File:

• sites/trunk/common/includes/wporg-sso/wp-plugin.php (modified) (1 diff)

sites/trunk/common/includes/wporg-sso/wp-plugin.php

@@ -230 +230 @@
                             }
                         }
-                    } elseif ( ( is_admin() && is_super_admin() ) || preg_match( '!^/wp-json(/?$|/.+)!i', $_SERVER['REQUEST_URI'] ) || '/xmlrpc.php' === $_SERVER['REQUEST_URI'] ) {
+                    } elseif ( ( is_admin() && is_super_admin() ) || 0 === strpos( $_SERVER['REQUEST_URI'], '/wp-json' ) || 0 === strpos( $_SERVER['REQUEST_URI'], '/xmlrpc.php' ) ) {
                         // Do nothing, allow access to wp-admin, wp-json and xmlrpc.php on login.wordpress.org
                     } elseif ( is_user_logged_in() ) {