Changeset 49374

Timestamp:

10/29/2020 04:52:48 PM (6 years ago)

Author:

whyisjake

Message:

Embeds: Disable embeds on deactivated Multisite sites.

Props xknown, whyisjake, zieladam, peterwilsoncc.

Location:

branches/5.5

Files:

• src/wp-includes/embed.php (modified) (1 diff)
• tests/phpunit/tests/multisite/site.php (modified) (1 diff)

branches/5.5/src/wp-includes/embed.php

@@ -610 +610 @@
                 $sites = get_sites( $qv );
                 $site  = reset( $sites );
+
+                // Do not allow embeds for deleted/archived/spam sites.
+                if ( ! empty( $site->deleted ) || ! empty( $site->spam ) || ! empty( $site->archived ) ) {
+                        return false;
+                }
 
                 if ( $site && get_current_blog_id() !== (int) $site->blog_id ) {

branches/5.5/tests/phpunit/tests/multisite/site.php

@@ -489 +489 @@
                 }
 
+                function test_content_from_spam_blog_is_not_available() {
+                        $spam_blog_id = self::factory()->blog->create();
+                        switch_to_blog( $spam_blog_id );
+                        $post_data      = array(
+                                'post_title'   => 'Hello World!',
+                                'post_content' => 'Hello world content',
+                        );
+                        $post_id        = self::factory()->post->create( $post_data );
+                        $post           = get_post( $post_id );
+                        $spam_permalink = site_url() . '/?p=' . $post->ID;
+                        $spam_embed_url = get_post_embed_url( $post_id );
+
+                        restore_current_blog();
+                        $this->assertNotEmpty( $spam_permalink );
+                        $this->assertEquals( $post_data['post_title'], $post->post_title );
+
+                        update_blog_status( $spam_blog_id, 'spam', 1 );
+
+                        $post_id = self::factory()->post->create(
+                                array(
+                                        'post_content' => "\n $spam_permalink \n",
+                                )
+                        );
+                        $post    = get_post( $post_id );
+                        $content = apply_filters( 'the_content', $post->post_content );
+
+                        $this->assertNotContains( $post_data['post_title'], $content );
+                        $this->assertNotContains( "src=\"{$spam_embed_url}#?", $content );
+                }
+
                 function test_update_blog_status_make_spam_blog_action() {
                         global $test_action_counter;