Changeset 35031

Timestamp:

10/12/2015 03:12:22 PM (11 years ago)

Author:

boonebgorges

Message:

Be stricter about sanitizing values coming out of WP_Term.

Data passed into get_instance() should be run through sanitize_term()
before being used.

See #34262.

File:

• trunk/src/wp-includes/class-wp-term.php (modified) (2 diffs)

trunk/src/wp-includes/class-wp-term.php

@@ -140 +140 @@
                 }
 
-                return new WP_Term( $_term );
+                $term_obj = new WP_Term( $_term );
+                $term_obj->filter( $term_obj->filter );
+
+                return $term_obj;
         }
 
@@ -166 +169 @@
          */
         public function filter( $filter ) {
-                // Term has already been filtered - nothing more to do.
-                if ( isset( $this->filter ) && $this->filter === $filter ) {
-                        return;
-                }
-
                 sanitize_term( $this, $this->taxonomy, $filter );
         }