Changeset 49198

Timestamp:

10/18/2020 09:04:33 PM (4 years ago)

Author:

johnbillion

Message:

Media: Add an image_sideload_extensions filter to the list of allowed file extensions when sideloading an image from a URL.

Props paulschreiber, hellofromTonya

Fixes #50695

File:

• trunk/src/wp-admin/includes/media.php (modified) (1 diff)

trunk/src/wp-admin/includes/media.php

@@ -981 +981 @@
     if ( ! empty( $file ) ) {
 
+        $allowed_extensions = array( 'jpg', 'jpeg', 'jpe', 'png', 'gif' );
+
+        /**
+         * Filters the list of allowed file extensions when sideloading an image from a URL.
+         *
+         * The default allowed extensions are:
+         *
+         *  - `jpg`
+         *  - `jpeg`
+         *  - `jpe`
+         *  - `png`
+         *  - `gif`
+         *
+         * @since 5.6.0
+         *
+         * @param string[] $allowed_extensions Array of allowed file extensions.
+         * @param string   $file               The URL of the image to download.
+         */
+        $allowed_extensions = apply_filters( 'image_sideload_extensions', $allowed_extensions, $file );
+        $allowed_extensions = array_map( 'preg_quote', $allowed_extensions );
+
         // Set variables for storage, fix file filename for query strings.
-        preg_match( '/[^\?]+\.(jpe?g|jpe|gif|png)\b/i', $file, $matches );
+        preg_match( '/[^\?]+\.(' . implode( '|', $allowed_extensions ) . ')\b/i', $file, $matches );
 
         if ( ! $matches ) {