[wp-trac] [WordPress Trac] #64457: Avoid underscores for hosts in wp_http_validate_url
WordPress Trac
noreply at wordpress.org
Mon Dec 29 14:03:45 UTC 2025
#64457: Avoid underscores for hosts in wp_http_validate_url
-------------------------+-----------------------------
Reporter: SirLouen | Owner: (none)
Type: enhancement | Status: new
Priority: low | Milestone: Future Release
Component: HTTP API | Version:
Severity: normal | Resolution:
Keywords: needs-patch | Focuses: performance
-------------------------+-----------------------------
Changes (by SirLouen):
* keywords: 2nd-opinion => needs-patch
* milestone: Awaiting Review => Future Release
Comment:
@westonruter true, I was triaging a GB report which happened to not only
enable underscores but also test truthy for underscore domains and I was a
little TF?
In fact, I was thinking that we should be filtering input with
[FILTER_VALIDATE_DOMAIN
https://www.php.net/manual/en/filter.constants.php#constant.filter-
validate-domain]
@manhphucofficial if you want take this.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/64457#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list