Changeset 36622 for trunk/src/wp-includes/widgets/class-wp-widget-text.php

Timestamp:

02/23/2016 01:01:43 AM (11 years ago)

Author:

westonruter

Message:

Customize: Prevent dropping backslashes from input on general settings and settings for nav menus and some widgets.

Ensures that intentional backslashes (e.g. "\o/") can be used in:

• Site title
• Site description
• Nav menu name
• Custom Menu widget title
• Tag Cloud widget title
• Text widget body if can't unfiltered_html

The latter three are also fixed on the widgets admin page.

Fixes #35898.

File:

• trunk/src/wp-includes/widgets/class-wp-widget-text.php (modified) (1 diff)

trunk/src/wp-includes/widgets/class-wp-widget-text.php

@@ -81 +81 @@
                 $instance = $old_instance;
                 $instance['title'] = sanitize_text_field( $new_instance['title'] );
-                if ( current_user_can('unfiltered_html') )
-                        $instance['text'] =  $new_instance['text'];
-                else
-                        $instance['text'] = wp_kses_post( stripslashes( $new_instance['text'] ) );
+                if ( current_user_can( 'unfiltered_html' ) ) {
+                        $instance['text'] = $new_instance['text'];
+                } else {
+                        $instance['text'] = wp_kses_post( $new_instance['text'] );
+                }
                 $instance['filter'] = ! empty( $new_instance['filter'] );
                 return $instance;