Changeset 37527

Timestamp:

05/23/2016 09:32:47 AM (10 years ago)

Author:

ocean90

Message:

Customize: Make sure that preview and return URLs are URLs.

File:

• trunk/src/wp-includes/class-wp-customize-manager.php (modified) (2 diffs)

trunk/src/wp-includes/class-wp-customize-manager.php

@@ -1632 +1632 @@
          */
         public function set_preview_url( $preview_url ) {
+                $preview_url = esc_url_raw( $preview_url );
                 $this->preview_url = wp_validate_redirect( $preview_url, home_url( '/' ) );
         }
@@ -1663 +1664 @@
          */
         public function set_return_url( $return_url ) {
+                $return_url = esc_url_raw( $return_url );
                 $return_url = remove_query_arg( wp_removable_query_args(), $return_url );
                 $return_url = wp_validate_redirect( $return_url );