Changeset 12108 for trunk/wp-admin/press-this.php

Timestamp:

10/26/2009 09:04:21 AM (15 years ago)

Author:

azaozz

Message:

PressThis fixes from noel, see #11011

File:

• trunk/wp-admin/press-this.php (modified) (2 diffs)

trunk/wp-admin/press-this.php

@@ -195 +195 @@
             $uri = preg_replace('/\/#.+?$/','', $uri);
             if( preg_match('/\.(jpg|jpe|jpeg|png|gif)$/', $uri) && !strpos($uri,'blogger.com') )
-                return "'".html_entity_decode($uri)."'";
+                return "'" . esc_attr( html_entity_decode($uri) ) . "'";
             $content = wp_remote_fopen($uri);
             if ( false === $content )
                 return '';
             $host = parse_url($uri);
-            $pattern = '/<img ([^>]*)src=(\"|\')([^<>\'\"]+)(\2)([^>]*)\/*>/is';
+            $pattern = '/<img ([^>]*)src=(\"|\')([^<>\'\"]+)(\2)([^>]*)\/*>/i';
+            $content = str_replace(array("\n","\t","\r"), '', $content);
             preg_match_all($pattern, $content, $matches);
             if ( empty($matches[0]) )
@@ -213 +214 @@
                     else
                         $src = 'http://'.str_replace('//','/', $host['host'].'/'.dirname($host['path']).'/'.$src);
-                $sources[] = esc_url($src);
+                $sources[] = esc_attr($src);
             }
             return "'" . implode("','", $sources) . "'";