Ticket #31645: 31645.4.patch

src/wp-admin/includes/class-wp-press-this.php

@@ -564 +564 @@
                                         $url = $this->_limit_url( $matches_url[1] );
 
                                         if ( ! empty( $url ) && empty( $data['_links'][ $rel ] ) ) {
+                                                if ( $rel === 'canonical' && ! preg_match( '%^(?:https?:)?//%i', $url ) ) {
+                                                        continue;
+                                                }
+
                                                 $data['_links'][ $rel ] = $url;
                                         }
                                 }
@@ -664 +668 @@
                                                         }
                                                 } else {
                                                         if ( in_array( $key, array( 'canonical', 'shortlink', 'icon' ), true ) ) {
-                                                                $data[ $type ][ $key ] = $this->_limit_url( wp_unslash( $value ) );
+                                                                $url = $this->_limit_url( wp_unslash( $value ) );
+
+                                                                if ( $key === 'canonical' && ! preg_match( '%^(?:https?:)?//%i', $url ) ) {
+                                                                        continue;
+                                                                }
+
+                                                                $data[ $type ][ $key ] = $url;
                                                         }
                                                 }
                                         }