Changeset 13158

Timestamp:

11/30/2021 08:29:59 PM (4 years ago)

Author:

imath

Message:

Validate an url param exists before processing an oEmbed XML request

Props dd32

Fixes #8601 (9.0 branch)

File:

• branches/9.0/src/bp-core/classes/class-bp-core-oembed-extension.php (modified) (1 diff)

branches/9.0/src/bp-core/classes/class-bp-core-oembed-extension.php

@@ -482 +482 @@
         // This is our mod to _oembed_rest_pre_serve_request().
         $query_params = $request->get_query_params();
-        if ( false === $this->validate_url_to_item_id( $query_params['url'] ) ) {
+        if ( ! isset( $query_params['url'] ) || false === $this->validate_url_to_item_id( $query_params['url'] ) ) {
             return $served;
         }