sanitize referer URI

This commit is contained in:
Stefan Kalscheuer 2020-05-10 12:00:41 +02:00
parent d343dda6ff
commit 31c04d6b92

View File

@ -226,9 +226,7 @@ class StatifyBlacklist {
// Regular Expression filtering since 1.3.0. // Regular Expression filtering since 1.3.0.
if ( isset( self::$options['target']['regexp'] ) && 0 < self::$options['target']['regexp'] ) { if ( isset( self::$options['target']['regexp'] ) && 0 < self::$options['target']['regexp'] ) {
// Get full referer string. // Get full referer string.
// @codingStandardsIgnoreStart The globals are checked. $target = ( isset( $_SERVER['REQUEST_URI'] ) ? filter_var( wp_unslash( $_SERVER['REQUEST_URI'] ), FILTER_SANITIZE_URL ) : '/' );
$target = ( isset( $_SERVER['REQUEST_URI'] ) ? $_SERVER['REQUEST_URI'] : '/' );
// @codingStandardsIgnoreEnd
// Merge given regular expressions into one. // Merge given regular expressions into one.
$regexp = self::regex( $regexp = self::regex(
array_keys( self::$options['target']['blacklist'] ), array_keys( self::$options['target']['blacklist'] ),
@ -241,9 +239,7 @@ class StatifyBlacklist {
} }
} else { } else {
// Extract target page. // Extract target page.
// @codingStandardsIgnoreStart The globals are checked. $target = ( isset( $_SERVER['REQUEST_URI'] ) ? filter_var( wp_unslash( $_SERVER['REQUEST_URI'] ), FILTER_SANITIZE_URL ) : '/' );
$target = ( isset( $_SERVER['REQUEST_URI'] ) ? $_SERVER['REQUEST_URI'] : '/' );
// @codingStandardsIgnoreEnd
// Get blacklist. // Get blacklist.
$blacklist = self::$options['target']['blacklist']; $blacklist = self::$options['target']['blacklist'];
// Check blacklist. // Check blacklist.