Changeset 50030 for trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php

Timestamp:

01/27/2021 07:03:42 PM (4 years ago)

Author:

TimothyBlynJacobs

Message:

App Passwords: Improve validation and sanitization of the application name.

Application names are now required to be unique and cannot contain solely whitespace characters. Additionally, invalid characters are now stripped from the application name using sanitize_text_field().

Props Boniu91, hellofromTonya, engahmeds3ed, xkon, francina.
Fixes #51941.

File:

• trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php (modified) (1 diff)

trunk/src/wp-includes/rest-api/endpoints/class-wp-rest-application-passwords-controller.php

@@ -632 +632 @@
                     'required'    => true,
                     'context'     => array( 'view', 'edit', 'embed' ),
+                    'minLength'   => 1,
+                    'pattern'     => '.*\S.*',
                 ),
                 'password'  => array(