Changeset 37768

Timestamp:

06/21/2016 02:15:40 PM (7 years ago)

Author:

ocean90

Message:

Customize: Make sure that preview and return URLs are URLs.

Merge of [37527] to the 4.5 branch.

Location:

branches/4.5

Files:

• . (modified) (1 prop)
• src/wp-includes/class-wp-customize-manager.php (modified) (2 diffs)

branches/4.5/src/wp-includes/class-wp-customize-manager.php

@@ -1543 +1543 @@
      */
     public function set_preview_url( $preview_url ) {
+        $preview_url = esc_url_raw( $preview_url );
         $this->preview_url = wp_validate_redirect( $preview_url, home_url( '/' ) );
     }
@@ -1574 +1575 @@
      */
     public function set_return_url( $return_url ) {
+        $return_url = esc_url_raw( $return_url );
         $return_url = remove_query_arg( wp_removable_query_args(), $return_url );
         $return_url = wp_validate_redirect( $return_url );