Changeset 41990

Timestamp:

10/24/2017 01:24:43 PM (9 years ago)

Author:

SergeyBiryukov

Message:

Formatting: Make sure wp_allowed_protocols() is filterable until wp_loaded has fired.

Fixes the issue with plugins not being able to use the kses_allowed_protocols filter if esc_url() was called too early.

Props turtlepod, SergeyBiryukov.
Fixes #36033.

File:

• trunk/src/wp-includes/functions.php (modified) (2 diffs)

trunk/src/wp-includes/functions.php

@@ -5078 +5078 @@
         if ( empty( $protocols ) ) {
                 $protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn', 'tel', 'fax', 'xmpp', 'webcal', 'urn' );
-
+        }
+
+        if ( ! did_action( 'wp_loaded' ) ) {
                 /**
                  * Filters the list of protocols allowed in HTML attributes.
@@ -5086 +5088 @@
                  * @param array $protocols Array of allowed protocols e.g. 'http', 'ftp', 'tel', and more.
                  */
-                $protocols = apply_filters( 'kses_allowed_protocols', $protocols );
+                $protocols = array_unique( (array) apply_filters( 'kses_allowed_protocols', $protocols ) );
         }