Changeset 30164 for trunk/src/wp-admin/customize.php

Timestamp:

11/01/2014 10:16:19 PM (12 years ago)

Author:

wonderboymusic

Message:

In customize.php, check that $autofocus is an array after running wp_unslash() instead of before. This is admittedly to skip a traversable hint in Scrutinizer.

See #30224.

File:

• trunk/src/wp-admin/customize.php (modified) (1 diff)

trunk/src/wp-admin/customize.php

@@ -283 +283 @@
 
         // Pass to frontend the Customizer construct being deeplinked
-        if ( isset( $_GET['autofocus'] ) && is_array( $_GET['autofocus'] ) ) {
+        if ( isset( $_GET['autofocus'] ) ) {
                 $autofocus = wp_unslash( $_GET['autofocus'] );
-                foreach ( $autofocus as $type => $id ) {
-                        if ( isset( $settings[ $type . 's' ][ $id ] ) ) {
-                                $settings['autofocus'][ $type ] = $id;
+                if ( is_array( $autofocus ) ) {
+                        foreach ( $autofocus as $type => $id ) {
+                                if ( isset( $settings[ $type . 's' ][ $id ] ) ) {
+                                        $settings['autofocus'][ $type ] = $id;
+                                }
                         }
                 }