Ticket #47539: formatting.php.diff

wp-includes/formatting.php

@@ -2011 +2011 @@
         $filename      = str_replace( $special_chars, '', $filename );
         $filename      = str_replace( array( '%20', '+' ), '-', $filename );
         $filename      = preg_replace( '/[\r\n\t -]+/', '-', $filename );
+        $filename      = preg_replace( '/[\x00-\x1F]/', '', $filename );
         $filename      = trim( $filename, '.-_' );
 
         if ( false === strpos( $filename, '.' ) ) {