Changeset 36622 for trunk/src/wp-includes/widgets/class-wp-widget-text.php

Timestamp:

02/23/2016 01:01:43 AM (10 years ago)

Author:

westonruter

Message:

Customize: Prevent dropping backslashes from input on general settings and settings for nav menus and some widgets.

Ensures that intentional backslashes (e.g. "\o/") can be used in:

• Site title
• Site description
• Nav menu name
• Custom Menu widget title
• Tag Cloud widget title
• Text widget body if can't unfiltered_html

The latter three are also fixed on the widgets admin page.

Fixes #35898.

File:

• trunk/src/wp-includes/widgets/class-wp-widget-text.php (modified) (1 diff)

trunk/src/wp-includes/widgets/class-wp-widget-text.php

@@ -81 +81 @@
         $instance = $old_instance;
         $instance['title'] = sanitize_text_field( $new_instance['title'] );
-        if ( current_user_can('unfiltered_html') )
-            $instance['text'] =  $new_instance['text'];
-        else
-            $instance['text'] = wp_kses_post( stripslashes( $new_instance['text'] ) );
+        if ( current_user_can( 'unfiltered_html' ) ) {
+            $instance['text'] = $new_instance['text'];
+        } else {
+            $instance['text'] = wp_kses_post( $new_instance['text'] );
+        }
         $instance['filter'] = ! empty( $new_instance['filter'] );
         return $instance;