Changeset 35031 for trunk/src/wp-includes/class-wp-term.php

Timestamp:

10/12/2015 03:12:22 PM (9 years ago)

Author:

boonebgorges

Message:

Be stricter about sanitizing values coming out of WP_Term.

Data passed into get_instance() should be run through sanitize_term()
before being used.

See #34262.

File:

• trunk/src/wp-includes/class-wp-term.php (modified) (2 diffs)

trunk/src/wp-includes/class-wp-term.php

@@ -140 +140 @@
         }
 
-        return new WP_Term( $_term );
+        $term_obj = new WP_Term( $_term );
+        $term_obj->filter( $term_obj->filter );
+
+        return $term_obj;
     }
 
@@ -166 +169 @@
      */
     public function filter( $filter ) {
-        // Term has already been filtered - nothing more to do.
-        if ( isset( $this->filter ) && $this->filter === $filter ) {
-            return;
-        }
-
         sanitize_term( $this, $this->taxonomy, $filter );
     }