Changeset 23591 for trunk/wp-includes/class-wp-customize-manager.php

Timestamp:

03/03/2013 04:30:38 PM (13 years ago)

Author:

ryan

Message:

Use wp_unslash() instead of stripslashes() and stripslashes_deep(). Use wp_slash() instead of add_magic_quotes().

see #WP21767

File:

• trunk/wp-includes/class-wp-customize-manager.php (modified) (1 diff)

trunk/wp-includes/class-wp-customize-manager.php

@@ -311 +311 @@
         if ( ! isset( $this->_post_values ) ) {
             if ( isset( $_POST['customized'] ) )
-                $this->_post_values = json_decode( stripslashes( $_POST['customized'] ), true );
+                $this->_post_values = json_decode( wp_unslash( $_POST['customized'] ), true );
             else
                 $this->_post_values = false;