[wp-trac] [WordPress Trac] #65123: Having a malformed post type query in $_GET or $_POST yields a critical error

[WordPress Trac]

#65123: Having a malformed post type query in $_GET or $_POST yields a critical
error
--------------------------+-----------------------------
 Reporter:  hheuzebrutc   |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Permalinks    |    Version:  6.9.4
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Steps to reproduce:
 - Go to a fresh install's homepage
 - Add ?attachment[foo]=bar to the url
 - press enter

 With the "attachment" post type, only the front page will crash, other
 pages will yield a 404. However, doing this with any custom post types the
 site might have can crash any page (as long as the post type is public).

 What's especially annoying for me is it also works with $_POST. If I make
 a form with an input name like public_post_type[sub_array], the site
 crashes upon submission and my form is never processed.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/65123>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform