Make WordPress Core


Ignore:
Timestamp:
04/29/2020 04:48:42 PM (4 years ago)
Author:
whyisjake
Message:

User: Invalidate user_activation_key on password update.
Query: Ensure that only a single post can be returned on date/time based queries.
Cache API: Ensure proper escaping around the stats method in the cache API.
Formatting: Expand sanitize_file_name to have better support for utf8 characters.

Brings the changes in [47634], [47635], [47637], and [47638] to the 4.3 branch.

Props: batmoo, ehti, nickdaugherty, peterwilsoncc, sergeybiryukov, sstoqnov, westi, whyisjake, whyisjake, xknown.

Location:
branches/4.3
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/4.3

  • branches/4.3/src/wp-includes/formatting.php

    r37814 r47656  
    13101310    $filename_raw = $filename;
    13111311    $special_chars = array("?", "[", "]", "/", "\\", "=", "<", ">", ":", ";", ",", "'", "\"", "&", "$", "#", "*", "(", ")", "|", "~", "`", "!", "{", "}", chr(0));
     1312
     1313    // Check for support for utf8 in the installed PCRE library once and store the result in a static.
     1314    static $utf8_pcre = null;
     1315    if ( ! isset( $utf8_pcre ) ) {
     1316        // phpcs:ignore WordPress.PHP.NoSilencedErrors.Discouraged
     1317        $utf8_pcre = @preg_match( '/^./u', 'a' );
     1318    }
     1319
     1320    if ( ! seems_utf8( $filename ) ) {
     1321        $_ext     = pathinfo( $filename, PATHINFO_EXTENSION );
     1322        $_name    = pathinfo( $filename, PATHINFO_FILENAME );
     1323        $filename = sanitize_title_with_dashes( $_name ) . '.' . $_ext;
     1324    }
     1325
     1326    if ( $utf8_pcre ) {
     1327        $filename = preg_replace( "#\x{00a0}#siu", ' ', $filename );
     1328    }
     1329
    13121330    /**
    13131331     * Filter the list of characters to remove from a filename.
     
    13191337     */
    13201338    $special_chars = apply_filters( 'sanitize_file_name_chars', $special_chars, $filename_raw );
    1321     $filename = preg_replace( "#\x{00a0}#siu", ' ', $filename );
    13221339    $filename = str_replace( $special_chars, '', $filename );
    13231340    $filename = str_replace( array( '%20', '+' ), '-', $filename );
Note: See TracChangeset for help on using the changeset viewer.