Make WordPress Core


Ignore:
Timestamp:
06/10/2020 06:11:24 PM (4 years ago)
Author:
desrosj
Message:

General: Backport several commits for release.

  • Embeds: Ensure that the title attribute is set correctly on embeds.
  • Editor: Prevent HTML decoding on by setting the proper editor context.
  • Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
  • Themes: Ensure a broken theme name is returned properly.
  • Administration: Add a new filter to extend set-screen-option.

Merges [47948-47951] to the 5.2 branch.
Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/5.2/src/wp-includes/pluggable.php

    r46486 r47960  
    13751375     */
    13761376    function wp_validate_redirect( $location, $default = '' ) {
    1377         $location = trim( $location, " \t\n\r\0\x08\x0B" );
    1378         // browsers will assume 'http' is your protocol, and will obey a redirect to a URL starting with '//'
    1379         if ( substr( $location, 0, 2 ) == '//' ) {
     1377        $location = wp_sanitize_redirect( trim( $location, " \t\n\r\0\x08\x0B" ) );
     1378        // Browsers will assume 'http' is your protocol, and will obey a redirect to a URL starting with '//'.
     1379        if ( '//' === substr( $location, 0, 2 ) ) {
    13801380            $location = 'http:' . $location;
    13811381        }
Note: See TracChangeset for help on using the changeset viewer.