Changeset 23580

Timestamp:

03/01/2013 06:59:54 PM (13 years ago)

Author:

nacin

Message:

Don't unslash variables that came from wp_reset_vars(). see #21767.

Location:

trunk/wp-admin

Files:

• plugin-editor.php (modified) (1 diff)
• theme-editor.php (modified) (1 diff)

trunk/wp-admin/plugin-editor.php

@@ -28 +28 @@
         wp_die( __('There are no plugins installed on this site.') );
 
-if ( isset($_REQUEST['file']) )
-        $plugin = wp_unslash($_REQUEST['file']);
-
-if ( empty($plugin) ) {
+if ( $file ) {
+        $plugin = $file;
+} elseif ( empty( $plugin ) ) {
         $plugin = array_keys($plugins);
         $plugin = $plugin[0];

trunk/wp-admin/theme-editor.php

@@ -69 +69 @@
         $file = $allowed_files['style.css'];
 } else {
-        $relative_file = wp_unslash( $file );
+        $relative_file = $file;
         $file = $theme->get_stylesheet_directory() . '/' . $relative_file;
 }