Changeset 47454 for trunk/src/wp-includes/functions.php

Timestamp:

03/13/2020 09:12:01 PM (5 years ago)

Author:

SergeyBiryukov

Message:

General: Trim the input data in maybe_unserialize(), for consistency with is_serialized().

Props pbearne, mikeschroder.
Fixes #36416.

File:

• trunk/src/wp-includes/functions.php (modified) (1 diff)

trunk/src/wp-includes/functions.php

@@ -617 +617 @@
 function maybe_unserialize( $data ) {
     if ( is_serialized( $data ) ) { // Don't attempt to unserialize data that wasn't serialized going in.
-        return @unserialize( $data );
+        return @unserialize( trim( $data ) );
     }