Changeset 41421 for branches/4.4

Timestamp:

09/19/2017 11:10:32 AM (9 years ago)

Author:

ocean90

Message:

Taxonomy/Users: Provide a fallback for incorrect HTTP referrers.

Merge of [41398] to the 4.4 branch.

Location:

branches/4.4

Files:

• . (modified) (1 prop)
• src/wp-admin/edit-tag-form.php (modified) (1 diff)
• src/wp-admin/user-edit.php (modified) (1 diff)

branches/4.4/src/wp-admin/edit-tag-form.php

@@ -80 +80 @@
         <p><strong><?php echo $message; ?></strong></p>
         <?php if ( $wp_http_referer ) { ?>
-        <p><a href="<?php echo esc_url( $wp_http_referer ); ?>"><?php printf( __( '&larr; Back to %s' ), $tax->labels->name ); ?></a></p>
+        <p><a href="<?php echo esc_url( wp_validate_redirect( wp_sanitize_redirect( $wp_http_referer ), admin_url( 'term.php?taxonomy=' . $taxonomy ) ) ); ?>"><?php printf( __( '&larr; Back to %s' ), $tax->labels->name ); ?></a></p>
         <?php } else { ?>
-        <p><a href="<?php echo esc_url( wp_get_referer() ); ?>"><?php printf( __( '&larr; Back to %s' ), $tax->labels->name ); ?></a></p>
+        <p><a href="<?php echo esc_url( wp_validate_redirect( wp_sanitize_redirect( wp_get_referer() ), admin_url( 'term.php?taxonomy=' . $taxonomy ) ) ); ?>"><?php printf( __( '&larr; Back to %s' ), $tax->labels->name ); ?></a></p>
         <?php } ?>
 </div>

branches/4.4/src/wp-admin/user-edit.php

@@ -179 +179 @@
         <?php endif; ?>
         <?php if ( $wp_http_referer && !IS_PROFILE_PAGE ) : ?>
-        <p><a href="<?php echo esc_url( $wp_http_referer ); ?>"><?php _e('&larr; Back to Users'); ?></a></p>
+        <p><a href="<?php echo esc_url( wp_validate_redirect( wp_sanitize_redirect( $wp_http_referer ), self_admin_url( 'users.php' ) ) ); ?>"><?php _e('&larr; Back to Users'); ?></a></p>
         <?php endif; ?>
 </div>