Make WordPress Core

Changeset 40470 for branches/3.7/src


Ignore:
Timestamp:
04/17/2017 01:47:40 PM (8 years ago)
Author:
swissspidy
Message:

Fix broken audio/video functions when sanitizing ID3 data

This fixes a bug where running wp_kses_post_deep() on all the ID3
tag data corrupted blob data.

See #40075, #40085.

Merges [40400] to the 3.7 branch.

Location:
branches/3.7
Files:
3 edited

Legend:

Unmodified
Added
Removed
  • branches/3.7

  • branches/3.7/src

  • branches/3.7/src/wp-admin/includes/media.php

    r40159 r40470  
    25822582            foreach ( $data[$version]['comments'] as $key => $list ) {
    25832583                if ( ! empty( $list ) ) {
    2584                     $metadata[$key] = reset( $list );
     2584                    $metadata[$key] = wp_kses_post( reset( $list ) );
    25852585                    // fix bug in byte stream analysis
    25862586                    if ( 'terms_of_use' === $key && 0 === strpos( $metadata[$key], 'yright notice.' ) )
     
    26662666    wp_add_id3_tag_data( $metadata, $data );
    26672667
    2668     $metadata = wp_kses_post_deep( $metadata );
    2669 
    26702668    return $metadata;
    26712669}
     
    27072705    wp_add_id3_tag_data( $metadata, $data );
    27082706
    2709     $metadata = wp_kses_post_deep( $metadata );
    2710 
    27112707    return $metadata;
    27122708}
Note: See TracChangeset for help on using the changeset viewer.