Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-06-25 22:35:02 +02:00
Code Issues Projects Releases Wiki Activity

Customize: Circumvent the customizer attempting to preview links to static assets (such as uploaded images).

Browse Source 
The customizer's preview POST requests to static assets result in 405 Method Not Allowed responses.

Fixes #37828.

Built from https://develop.svn.wordpress.org/trunk@38396


git-svn-id: http://core.svn.wordpress.org/trunk@38337 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Weston Ruter 2016-08-27 06:05:29 +00:00
parent e05a033bcb
commit e6ed174135
3 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
wp-admin/js/customize-controls.js
View File

@ -3210,12 +3210,14 @@
// ssl certs.
this.add( 'previewUrl', params.previewUrl ).setter( function( to ) {
var result;
var result, urlParser;
urlParser = document.createElement( 'a' );
urlParser.href = to;
// Check for URLs that include "/wp-admin/" or end in "/wp-admin".
// Strip hashes and query strings before testing.
if ( /\/wp-admin(\/|$)/.test( to.replace( /[#?].*$/, '' ) ) )
// Abort if URL is for admin or (static) files in wp-includes or wp-content.
if ( /\/wp-(admin|includes|content)(\/|$)/.test( urlParser.pathname ) ) {
return null;
}
// Attempt to match the URL to the control frame's scheme
// and check if it's allowed. If not, try the original URL.

2
wp-admin/js/customize-controls.min.js vendored
View File

File diff suppressed because one or more lines are too long

2
wp-includes/version.php
View File

@ -4,7 +4,7 @@
*
* @global string $wp_version
*/
$wp_version = '4.7-alpha-38395';
$wp_version = '4.7-alpha-38396';
/**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.