From 54e04cd70ed71b76fea99f8b1f0a7f76d8e337d7 Mon Sep 17 00:00:00 2001 From: Dominik Schilling Date: Tue, 3 Apr 2018 15:36:15 +0000 Subject: [PATCH] HTTP: Don't treat `localhost` as same host by default. Merge of [42894] to the 4.8 branch. Built from https://develop.svn.wordpress.org/branches/4.8@42909 git-svn-id: http://core.svn.wordpress.org/branches/4.8@42739 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/http.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/http.php b/wp-includes/http.php index 3e26b08fd8..2af3292caf 100644 --- a/wp-includes/http.php +++ b/wp-includes/http.php @@ -530,7 +530,7 @@ function wp_http_validate_url( $url ) { $parsed_home = @parse_url( get_option( 'home' ) ); if ( isset( $parsed_home['host'] ) ) { - $same_host = ( strtolower( $parsed_home['host'] ) === strtolower( $parsed_url['host'] ) || 'localhost' === strtolower( $parsed_url['host'] ) ); + $same_host = strtolower( $parsed_home['host'] ) === strtolower( $parsed_url['host'] ); } else { $same_host = false; }