[wp-trac] [WordPress Trac] #38709: Unlimited query for invalid post names

WordPress Trac noreply at wordpress.org
Thu Aug 24 19:51:57 UTC 2023


#38709: Unlimited query for invalid post names
--------------------------+-----------------------------
 Reporter:  david.binda   |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Future Release
Component:  Query         |     Version:  4.6.1
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |     Focuses:  performance
--------------------------+-----------------------------
Changes (by joemcgill):

 * keywords:  has-patch => needs-patch
 * milestone:  Awaiting Review => Future Release


Comment:

 @iCaleb and I were testing this ticket at WCUS 2023 contributor day and it
 would be great to get this fixed. The patch @rebasaurus added is very
 close, but doesn't result in the value actually getting sanitized in it's
 current form. What if we move the sanitization to above the `if` statement
 instead? The only downside is that we're unnecessarily running the
 sanitization on known empty name values, but in practice, seems like a
 much less impactful problem then what is occurring now.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/38709#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list