Ticket #20246: 20246.2.patch

wp-includes/class-oembed.php

@@ -236 +236 @@
                         case 'photo':
                                 if ( empty( $data->url ) || empty( $data->width ) || empty( $data->height ) )
                                         break;
-                                if ( ! is_string( $data->url ) || ! is_numeric( $data->width ) || ! is_numeric( $data->height ) )
-                                        break;
 
-                                $title = ! empty( $data->title ) && is_string( $data->title ) ? $data->title : '';
-                                $return = '<a href="' . esc_url( $url ) . '"><img src="' . esc_url( $data->url ) . '" alt="' . esc_attr($title) . '" width="' . esc_attr($data->width) . '" height="' . esc_attr($data->height) . '" /></a>';
+                                $title = ! empty( $data->title ) ? (string) $data->title : '';
+                                $return = '<a href="' . esc_url( $url ) . '"><img src="' . esc_url( (string) $data->url ) . '" alt="' . esc_attr( $title ) . '" width="' . esc_attr( (int) $data->width ) . '" height="' . esc_attr( (int) $data->height ) . '" /></a>';
                                 break;
 
                         case 'video':
                         case 'rich':
-                                if ( ! empty( $data->html ) && is_string( $data->html ) )
-                                        $return = $data->html;
+                                if ( ! empty( $data->html ) )
+                                        $return = (string) $data->html;
                                 break;
 
                         case 'link':
-                                if ( ! empty( $data->title ) && is_string( $data->title ) )
-                                        $return = '<a href="' . esc_url( $url ) . '">' . esc_html( $data->title ) . '</a>';
+                                if ( ! empty( $data->title ) )
+                                        $return = '<a href="' . esc_url( $url ) . '">' . esc_html( (string) $data->title ) . '</a>';
                                 break;
 
                         default: