Changeset 47980 for branches/4.8/src/wp-admin/themes.php

Timestamp:

06/10/2020 06:50:15 PM (5 years ago)

Author:

whyisjake

Message:

General: Backport several commits for release.

• Embeds: Ensure that the title attribute is set correctly on embeds.
• Editor: Prevent HTML decoding on by setting the proper editor context.
• Formatting: Ensure that wp_validate_redirect() sanitizes a wider variety of characters.
• Themes: Ensure a broken theme name is returned properly.
• Administration: Add a new filter to extend set-screen-option.

Merges [47947-47951] to the 4.8 branch.

Props xknown, sstoqnov, vortfu, SergeyBiryukov, whyisjake.

File:

• branches/4.8/src/wp-admin/themes.php (modified) (1 diff)

branches/4.8/src/wp-admin/themes.php

@@ -332 +332 @@
     <?php foreach ( $broken_themes as $broken_theme ) : ?>
         <tr>
-            <td><?php echo $broken_theme->get( 'Name' ) ? $broken_theme->display( 'Name' ) : $broken_theme->get_stylesheet(); ?></td>
+            <td><?php echo $broken_theme->get( 'Name' ) ? $broken_theme->display( 'Name' ) : esc_html( $broken_theme->get_stylesheet() ); ?></td>
             <td><?php echo $broken_theme->errors()->get_error_message(); ?></td>
             <?php