stklcode / statify-blacklist

Filter extension for the Statify WordPress plugin
https://wordpress.org/plugins/statify-blacklist/
GNU General Public License v2.0
2 stars 1 forks source link

Validate regular expressions before saving #13

Closed stklcode closed 4 years ago

stklcode commented 6 years ago

When using regular expressions, the filter strings are simply saved to database. This raises a warning from preg_match() when an expression is invalid or clashes with delimiters /.

These expresions should be validated before saving or - if possible - sanitized (analog to URL sanitization for non-regex referrer filter) to avoid such warnings.