WordPress.org

Make WordPress Core

Ticket #21990: 21990-subclass.3.diff

File 21990-subclass.3.diff, 1.7 KB (added by markjaquith, 17 months ago)

with documentation and inline comments

  • wp-includes/feed.php

    new file mode 100644
    ---wp-includes/class-simplepie-kses.php	(revision 0)n+++wp-includes/class-simplepie-kses.php	(revision 0)
    @@ -0,0 +1,27 @@
    +<?php
    +/**
    + * WordPress extension of SimplePie sanitization
    + *
    + * Contains the WP_SimplePie_Sanitize_KSES class
    + *
    + * @package WordPress
    + */
    +
    +/**
    + * WordPress SimplePie Sanitization Class
    + *
    + * Extension of the SimplePie_Sanitize class to use KSES, because
    + * we cannot universally count on DOMDocument being available
    + *
    + * @package WordPress
    + * @since 3.5.0
    + */
    +class WP_SimplePie_Sanitize_KSES extends SimplePie_Sanitize {
    +	public function sanitize( $data, $type, $base = '' ) {
    +		if ( $type & ( SIMPLEPIE_CONSTRUCT_HTML | SIMPLEPIE_CONSTRUCT_XHTML ) ) {
    +			return wp_kses_post( $data );
    +		} else {
    +			return parent::sanitize( $data, $type, $base );
    +		}
    +	}
    +}
    function feed_content_type( $type = '' ) { 
    525525 */ 
    526526function fetch_feed($url) { 
    527527        require_once (ABSPATH . WPINC . '/class-feed.php'); 
     528        require_once (ABSPATH . WPINC . '/class-simplepie-kses.php'); 
    528529 
    529530        $feed = new SimplePie(); 
    530531 
     532        $feed->set_sanitize_class( 'WP_SimplePie_Sanitize_KSES' ); 
     533        // We must manually overwrite $feed->sanitize because SimplePie's 
     534        // constructor sets it before we have a chance to set the sanitization class 
     535        $feed->sanitize = new WP_SimplePie_Sanitize_KSES(); 
     536         
    531537        $feed->set_cache_class( 'WP_Feed_Cache' ); 
    532538        $feed->set_file_class( 'WP_SimplePie_File' ); 
    533539