Changeset 52754

Timestamp:

02/17/2022 02:45:53 PM (3 years ago)

Author:

ocean90

Message:

Script Loader: Prevent normalizing data URIs in _wp_normalize_relative_css_links().

This prevents making data URIs as in mask-image:url('data:image/svg+xml;utf8,<svg... relative to the WordPress installation.

Props staatic.
See #54243.
Fixes #55177.

Location:

trunk

Files:

• src/wp-includes/script-loader.php (modified) (1 diff)
• tests/phpunit/tests/dependencies/styles.php (modified) (1 diff)

trunk/src/wp-includes/script-loader.php

@@ -2782 +2782 @@
             }
 
+            // Skip if the URL is a data URI.
+            if ( str_starts_with( $src_result, 'data:' ) ) {
+                continue;
+            }
+
             // Build the absolute URL.
             $absolute_url = dirname( $stylesheet_url ) . '/' . $src_result;

trunk/tests/phpunit/tests/dependencies/styles.php

@@ -237 +237 @@
                 'expected' => 'clip-path: url(#image1);',
             ),
+            'Data URIs, shouldn\'t change'                 => array(
+                'css'      => 'img {mask-image: url(\'data:image/svg+xml;utf8,<svg></svg>\');}',
+                'expected' => 'img {mask-image: url(\'data:image/svg+xml;utf8,<svg></svg>\');}',
+            ),
         );
     }