Changeset 40400 for trunk

Timestamp:

04/10/2017 01:27:30 AM (8 years ago)

Author:

joemcgill

Message:

Fix broken audio/video functions when sanitizing ID3 data

This fixes a bug where running wp_kses_post_deep() on all the ID3
tag data corrupted blob data.

Fixes #40075, #40085.

File:

• trunk/src/wp-admin/includes/media.php (modified) (3 diffs)

trunk/src/wp-admin/includes/media.php

@@ -2983 +2983 @@
             foreach ( $data[$version]['comments'] as $key => $list ) {
                 if ( 'length' !== $key && ! empty( $list ) ) {
-                    $metadata[$key] = reset( $list );
+                    $metadata[$key] = wp_kses_post( reset( $list ) );
                     // Fix bug in byte stream analysis.
                     if ( 'terms_of_use' === $key && 0 === strpos( $metadata[$key], 'yright notice.' ) )
@@ -3073 +3073 @@
     wp_add_id3_tag_data( $metadata, $data );
 
-    $metadata = wp_kses_post_deep( $metadata );
-
     return $metadata;
 }
@@ -3120 +3118 @@
     wp_add_id3_tag_data( $metadata, $data );
 
-    $metadata = wp_kses_post_deep( $metadata );
-
     return $metadata;
 }