WordPress.org

Make WordPress Core


Ignore:
Timestamp:
03/25/2017 01:34:27 PM (5 years ago)
Author:
swissspidy
Message:

Customize: Prevent links to customize.php from being generated which have query vars from wp_removable_query_args() present.

Props dlh.
See #23367, #32692.
Fixes #31850.

Merges [40313] to the 4.7 branch.

Location:
branches/4.7
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/4.7

  • branches/4.7/src/wp-admin/widgets.php

    r39761 r40331  
    356356                array(
    357357                    array( 'autofocus' => array( 'panel' => 'widgets' ) ),
    358                     'return' => urlencode( wp_unslash( $_SERVER['REQUEST_URI'] ) )
     358                    'return' => urlencode( remove_query_arg( wp_removable_query_args(), wp_unslash( $_SERVER['REQUEST_URI'] ) ) )
    359359                ),
    360360                admin_url( 'customize.php' )
Note: See TracChangeset for help on using the changeset viewer.