Make WordPress Core

Changeset 52468 for branches/5.5


Ignore:
Timestamp:
01/06/2022 06:09:14 PM (2 years ago)
Author:
desrosj
Message:

Grouped backports to the 5.5 branch.

  • Query: Improve sanitization within WP_Tax_Query.
  • Query: Improve sanitization within WP_Meta_Query.
  • Upgrade/Install: Avoid using unserialize() unnecessarily.
  • Formatting: Correctly encode ASCII characters in post slugs.

Merges [52454-52457] to the 5.5 branch.
Props vortfu, dd32, ehtis, zieladam, whyisjake, xknown, peterwilsoncc, desrosj, iandunn.

Location:
branches/5.5
Files:
6 edited

Legend:

Unmodified
Added
Removed
  • branches/5.5

  • branches/5.5/src/wp-admin/includes/upgrade.php

    r48869 r52468  
    16211621        while ( $rows = $wpdb->get_results( "SELECT option_name, option_value FROM $wpdb->options ORDER BY option_id LIMIT $start, 20" ) ) {
    16221622            foreach ( $rows as $row ) {
    1623                 $value = $row->option_value;
    1624                 if ( ! @unserialize( $value ) ) {
     1623                $value = maybe_unserialize( $row->option_value );
     1624                if ( $value === $row->option_value ) {
    16251625                    $value = stripslashes( $value );
    16261626                }
  • branches/5.5/src/wp-includes/class-wp-meta-query.php

    r48475 r52468  
    813813            $sibling_compare = strtoupper( $sibling['compare'] );
    814814            if ( in_array( $clause_compare, $compatible_compares, true ) && in_array( $sibling_compare, $compatible_compares, true ) ) {
    815                 $alias = $sibling['alias'];
     815                $alias = preg_replace( '/\W/', '_', $sibling['alias'] );
    816816                break;
    817817            }
  • branches/5.5/src/wp-includes/class-wp-tax-query.php

    r48475 r52468  
    528528            // The sibling must both have compatible operator to share its alias.
    529529            if ( in_array( strtoupper( $sibling['operator'] ), $compatible_operators, true ) ) {
    530                 $alias = $sibling['alias'];
     530                $alias = preg_replace( '/\W/', '_', $sibling['alias'] );
    531531                break;
    532532            }
     
    557557        }
    558558
    559         $query['terms'] = array_unique( (array) $query['terms'] );
     559        if ( 'slug' === $query['field'] || 'name' === $query['field'] ) {
     560            $query['terms'] = array_unique( (array) $query['terms'] );
     561        } else {
     562            $query['terms'] = wp_parse_id_list( $query['terms'] );
     563        }
    560564
    561565        if ( is_taxonomy_hierarchical( $query['taxonomy'] ) && $query['include_children'] ) {
  • branches/5.5/src/wp-includes/formatting.php

    r48819 r52468  
    11391139 *
    11401140 * @since 1.5.0
    1141  *
    1142  * @param string $utf8_string
    1143  * @param int    $length Max  length of the string
     1141 * @since 5.8.3 Added the `encode_ascii_characters` parameter.
     1142 *
     1143 * @param string $utf8_string             String to encode.
     1144 * @param int    $length                  Max length of the string
     1145 * @param bool   $encode_ascii_characters Whether to encode ascii characters such as < " '
    11441146 * @return string String with Unicode encoded for URI.
    11451147 */
    1146 function utf8_uri_encode( $utf8_string, $length = 0 ) {
     1148function utf8_uri_encode( $utf8_string, $length = 0, $encode_ascii_characters = false ) {
    11471149    $unicode        = '';
    11481150    $values         = array();
     
    11591161
    11601162        if ( $value < 128 ) {
    1161             if ( $length && ( $unicode_length >= $length ) ) {
     1163            $char                = chr( $value );
     1164            $encoded_char        = $encode_ascii_characters ? rawurlencode( $char ) : $char;
     1165            $encoded_char_length = strlen( $encoded_char );
     1166            if ( $length && ( $unicode_length + $encoded_char_length ) > $length ) {
    11621167                break;
    11631168            }
    1164             $unicode .= chr( $value );
    1165             $unicode_length++;
     1169            $unicode        .= $encoded_char;
     1170            $unicode_length += $encoded_char_length;
    11661171        } else {
    11671172            if ( count( $values ) == 0 ) {
  • branches/5.5/src/wp-includes/post.php

    r49332 r52468  
    46404640            $slug = substr( $slug, 0, $length );
    46414641        } else {
    4642             $slug = utf8_uri_encode( $decoded_slug, $length );
     4642            $slug = utf8_uri_encode( $decoded_slug, $length, true );
    46434643        }
    46444644    }
Note: See TracChangeset for help on using the changeset viewer.