Changeset 49198

Timestamp:

10/18/2020 09:04:33 PM (6 years ago)

Author:

johnbillion

Message:

Media: Add an image_sideload_extensions filter to the list of allowed file extensions when sideloading an image from a URL.

Props paulschreiber, hellofromTonya

Fixes #50695

File:

• trunk/src/wp-admin/includes/media.php (modified) (1 diff)

trunk/src/wp-admin/includes/media.php

@@ -981 +981 @@
         if ( ! empty( $file ) ) {
 
+                $allowed_extensions = array( 'jpg', 'jpeg', 'jpe', 'png', 'gif' );
+
+                /**
+                 * Filters the list of allowed file extensions when sideloading an image from a URL.
+                 *
+                 * The default allowed extensions are:
+                 *
+                 *  - `jpg`
+                 *  - `jpeg`
+                 *  - `jpe`
+                 *  - `png`
+                 *  - `gif`
+                 *
+                 * @since 5.6.0
+                 *
+                 * @param string[] $allowed_extensions Array of allowed file extensions.
+                 * @param string   $file               The URL of the image to download.
+                 */
+                $allowed_extensions = apply_filters( 'image_sideload_extensions', $allowed_extensions, $file );
+                $allowed_extensions = array_map( 'preg_quote', $allowed_extensions );
+
                 // Set variables for storage, fix file filename for query strings.
-                preg_match( '/[^\?]+\.(jpe?g|jpe|gif|png)\b/i', $file, $matches );
+                preg_match( '/[^\?]+\.(' . implode( '|', $allowed_extensions ) . ')\b/i', $file, $matches );
 
                 if ( ! $matches ) {