Skip to content

Commit ff8ccb8

Browse files
committed
Bad Requests: Validate email-share-nonce field in Jetpack Share by Email requests.
Avoids a PHP warning when vulnerability scanners send the nonce as an array. git-svn-id: https://meta.svn.wordpress.org/sites/trunk@14775 74240141-8908-4e6f-9713-ba540dce6ec7
1 parent 28764ff commit ff8ccb8

1 file changed

Lines changed: 1 addition & 0 deletions

File tree

wordpress.org/public_html/wp-content/mu-plugins/pub/wporg-bad-request.php

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -215,6 +215,7 @@ function check_for_invalid_query_vars( $vars, $ref = '$public_query_vars' ) {
215215
'source_email',
216216
'source_f_name',
217217
'source_name',
218+
'email-share-nonce',
218219
];
219220

220221
foreach ( $share_by_email_fields as $field ) {

0 commit comments

Comments
 (0)