Changeset 44589 for trunk/src/wp-includes/widgets/class-wp-widget-meta.php

Timestamp:

01/15/2019 12:42:30 AM (6 years ago)

Author:

pento

Message:

Widgets: Remove unnecessary sanitize_text_field() calls in core widget ::form() methods.

This sanitisation only needs to be run in ::update() to correctly clean up the input.

Props welcher, greenshady.
Fixes #42461.

File:

• trunk/src/wp-includes/widgets/class-wp-widget-meta.php (modified) (1 diff)

trunk/src/wp-includes/widgets/class-wp-widget-meta.php

@@ -114 +114 @@
     public function form( $instance ) {
         $instance = wp_parse_args( (array) $instance, array( 'title' => '' ) );
-        $title    = sanitize_text_field( $instance['title'] );
         ?>
-            <p><label for="<?php echo $this->get_field_id( 'title' ); ?>"><?php _e( 'Title:' ); ?></label> <input class="widefat" id="<?php echo $this->get_field_id( 'title' ); ?>" name="<?php echo $this->get_field_name( 'title' ); ?>" type="text" value="<?php echo esc_attr( $title ); ?>" /></p>
+            <p><label for="<?php echo $this->get_field_id( 'title' ); ?>"><?php _e( 'Title:' ); ?></label> <input class="widefat" id="<?php echo $this->get_field_id( 'title' ); ?>" name="<?php echo $this->get_field_name( 'title' ); ?>" type="text" value="<?php echo esc_attr( $instance['title'] ); ?>" /></p>
         <?php
     }