Ticket #18187: sidebars_sanitize_title.diff

wp-includes/widgets.php

@@ -554 +554 @@
         );
 
         $sidebar = wp_parse_args( $args, $defaults );
+        
+        $sidebar['id'] = sanitize_title($sidebar['id']);
 
         $wp_registered_sidebars[$sidebar['id']] = $sidebar;
 
@@ -576 +578 @@
 function unregister_sidebar( $name ) {
         global $wp_registered_sidebars;
 
+        $name = sanitize_title($name);
+        
         if ( isset( $wp_registered_sidebars[$name] ) )
                 unset( $wp_registered_sidebars[$name] );
 }
@@ -675 +679 @@
                 return;
 
         global $wp_registered_sidebars;
+        
+        $id = sanitize_title($id);
 
         if ( isset($wp_registered_sidebars[$id]['description']) )
                 return esc_html( $wp_registered_sidebars[$id]['description'] );