[wp-trac] [WordPress Trac] #5272: WordPress allows anonymous user to see slug for private post by guessing post number
WordPress Trac
noreply at wordpress.org
Tue Feb 2 09:02:27 UTC 2021
#5272: WordPress allows anonymous user to see slug for private post by guessing
post number
-------------------------------------------------+-------------------------
Reporter: tzafrir | Owner:
| SergeyBiryukov
Type: defect (bug) | Status: reopened
Priority: normal | Milestone: 5.7
Component: Security | Version: 2.3.1
Severity: normal | Resolution:
Keywords: has-patch has-unit-tests needs-dev- | Focuses:
note |
-------------------------------------------------+-------------------------
Changes (by SergeyBiryukov):
* status: closed => reopened
* resolution: fixed =>
Comment:
[50132] looks good to me, but I'm not quite a fan of using "ugly" in a
function name :)
Since these are called "Plain" in Permalink Settings UI, could we rename
it to `wp_force_plain_post_permalink()`?
--
Ticket URL: <https://core.trac.wordpress.org/ticket/5272#comment:31>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list