Ticket #44107: 44107.2.diff

src/wp-includes/user.php

@@ -2034 +2034 @@
 
         $raw_user_url = empty( $userdata['user_url'] ) ? '' : $userdata['user_url'];
 
+        /**
+         * Check if user url length  is <= 100 chars
+         * 
+         * @since 6.0.0
+         * 
+         * @ticket 44107
+         */
+        if ( mb_strlen( $raw_user_url ) > 100 ) {
+                return new WP_Error( 'user_url_too_long', __( 'User URL may not be longer than 100 characters.' ) );
+        }
+
         /**
          * Filters a user's URL before the user is created or updated.
          *

tests/phpunit/tests/user.php

@@ -1000 +1000 @@
                 $this->assertSame( $expected, $user->user_nicename );
         }
 
+        /**
+         * @ticket 44107
+         */
+        public function test_wp_insert_user_should_reject_user_url_over_100_characters() {
+                $user_url = str_repeat( 'a', 101 );
+                $u                = wp_insert_user(
+                                array(
+                                        'user_login'    => 'test',
+                                        'user_email'    => 'test@example.com',
+                                        'user_pass'     => 'password',
+                                        'user_url'              => $user_url,
+                                )
+                );
+
+                $this->assertWPError( $u );
+        }
+
         /**
          * @ticket 28004
          */