Changeset 36608 for trunk/src/wp-includes/customize/class-wp-customize-nav-menu-item-setting.php

Timestamp:

02/22/2016 12:13:53 AM (9 years ago)

Author:

westonruter

Message:

Customize: Fix previewing and updating of nav menu items containing slashed/slashable characters.

Prevents slashes from being added when a user without unfiltered_html previews a nav menu item containing an apostrophe or some other slashable character, and prevents the loss of an intentional slash (e.g. "\o/") when saving a nav menu item, regardless of capability.

Fixes #35869.

File:

• trunk/src/wp-includes/customize/class-wp-customize-nav-menu-item-setting.php (modified) (2 diffs)

trunk/src/wp-includes/customize/class-wp-customize-nav-menu-item-setting.php

@@ -640 +640 @@
 
         // Apply the same filters as when calling wp_insert_post().
-        $menu_item_value['title'] = apply_filters( 'title_save_pre', $menu_item_value['title'] );
-        $menu_item_value['attr_title'] = apply_filters( 'excerpt_save_pre', $menu_item_value['attr_title'] );
-        $menu_item_value['description'] = apply_filters( 'content_save_pre', $menu_item_value['description'] );
+        $menu_item_value['title'] = wp_unslash( apply_filters( 'title_save_pre', wp_slash( $menu_item_value['title'] ) ) );
+        $menu_item_value['attr_title'] = wp_unslash( apply_filters( 'excerpt_save_pre', wp_slash( $menu_item_value['attr_title'] ) ) );
+        $menu_item_value['description'] = wp_unslash( apply_filters( 'content_save_pre', wp_slash( $menu_item_value['description'] ) ) );
 
         $menu_item_value['url'] = esc_url_raw( $menu_item_value['url'] );
@@ -777 +777 @@
                 $value['nav_menu_term_id'],
                 $is_placeholder ? 0 : $this->post_id,
-                $menu_item_data
+                wp_slash( $menu_item_data )
             );