Changeset 37163 for trunk/src/wp-includes/rest-api/class-wp-rest-server.php

Timestamp:

04/06/2016 09:01:11 PM (9 years ago)

Author:

markjaquith

Message:

REST API: Deliver parameters unadulterated instead of slashed.

We goofed, and parameters accessed through the REST API's methods
were slashed (inconsistently, even). This unslashes the data, so
you get the un-messed-with data that was sent.

Props joehoyle.
Fixes #36419.

File:

• trunk/src/wp-includes/rest-api/class-wp-rest-server.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/class-wp-rest-server.php

@@ -304 +304 @@
         $request = new WP_REST_Request( $_SERVER['REQUEST_METHOD'], $path );
 
-        $request->set_query_params( $_GET );
-        $request->set_body_params( $_POST );
+        $request->set_query_params( wp_unslash( $_GET ) );
+        $request->set_body_params( wp_unslash( $_POST ) );
         $request->set_file_params( $_FILES );
-        $request->set_headers( $this->get_headers( $_SERVER ) );
+        $request->set_headers( $this->get_headers( wp_unslash( $_SERVER ) ) );
         $request->set_body( $this->get_raw_data() );