From 59523c0dba505d2262182c436402d9f04e67e82d Mon Sep 17 00:00:00 2001 From: Dominik Schilling Date: Tue, 2 Feb 2016 13:03:28 +0000 Subject: [PATCH] HTTP: `0.1.2.3` is not a valid IP. Merges [36435] to the 4.4 branch. Built from https://develop.svn.wordpress.org/branches/4.4@36436 git-svn-id: http://core.svn.wordpress.org/branches/4.4@36403 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/http.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/http.php b/wp-includes/http.php index 8fa00e942f..9f254a15be 100644 --- a/wp-includes/http.php +++ b/wp-includes/http.php @@ -536,7 +536,7 @@ function wp_http_validate_url( $url ) { } if ( $ip ) { $parts = array_map( 'intval', explode( '.', $ip ) ); - if ( 127 === $parts[0] || 10 === $parts[0] + if ( 127 === $parts[0] || 10 === $parts[0] || 0 === $parts[0] || ( 172 === $parts[0] && 16 <= $parts[1] && 31 >= $parts[1] ) || ( 192 === $parts[0] && 168 === $parts[1] ) ) {