WordPress.org

Make WordPress Core

Changeset 23580


Ignore:
Timestamp:
03/01/2013 06:59:54 PM (6 years ago)
Author:
nacin
Message:

Don't unslash variables that came from wp_reset_vars(). see #21767.

Location:
trunk/wp-admin
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • trunk/wp-admin/plugin-editor.php

    r23567 r23580  
    2828    wp_die( __('There are no plugins installed on this site.') );
    2929
    30 if ( isset($_REQUEST['file']) )
    31     $plugin = wp_unslash($_REQUEST['file']);
    32 
    33 if ( empty($plugin) ) {
     30if ( $file ) {
     31    $plugin = $file;
     32} elseif ( empty( $plugin ) ) {
    3433    $plugin = array_keys($plugins);
    3534    $plugin = $plugin[0];
  • trunk/wp-admin/theme-editor.php

    r23567 r23580  
    6969    $file = $allowed_files['style.css'];
    7070} else {
    71     $relative_file = wp_unslash( $file );
     71    $relative_file = $file;
    7272    $file = $theme->get_stylesheet_directory() . '/' . $relative_file;
    7373}
Note: See TracChangeset for help on using the changeset viewer.