Ticket #40070: sanitize-stylesheet-slug.diff

ajax-actions.php

@@ -4289 +4289 @@
                 );
         }
 
-        $stylesheet = preg_replace( '/[^A-z0-9_\-]/', '', wp_unslash( $_POST['slug'] ) );
+        $stylesheet = sanitize_file_name( wp_unslash( $_POST['slug'] ) );
         $status     = array(
                 'update'     => 'theme',
                 'slug'       => $stylesheet,