Terence Ong 4367d68202 fix: security hardening for LLM thumbnail feature (QA-002,004,005,006) ...

- Use $wpdb->prepare() with esc_like() in clear_article_cache()
- Add strict base64_decode() validation with error handling
- Add isset()/is_array()/is_string() checks for nested array access
- Add wp_http_validate_url() SSRF prevention on all image downloads
- Add limit_response_size (5MB) on image URL downloads
- Set chmod 0644 after file_put_contents()

2026-04-06 10:19:53 +07:00

24 KiB

Raw Blame History

View Raw