Changeset 53455 for trunk/src/wp-includes/script-loader.php

Timestamp:

06/01/2022 06:12:25 PM (4 years ago)

Author:

SergeyBiryukov

Message:

General: Replace all esc_url_raw() calls in core with sanitize_url().

This aims to improve performance by calling sanitize_url() directly, instead of the esc_url_raw() wrapper. As of WordPress 6.1, sanitize_url() is the recommended function for sanitizing a URL for database or redirect usage.

Follow-up to [11383], [13096], [51597], [53452].

Props benjgrolleau, peterwilsoncc, SergeyBiryukov.
Fixes #55852.

File:

• trunk/src/wp-includes/script-loader.php (modified) (2 diffs)

trunk/src/wp-includes/script-loader.php

@@ -338 +338 @@
                 sprintf(
                         'wp.apiFetch.use( wp.apiFetch.createRootURLMiddleware( "%s" ) );',
-                        esc_url_raw( get_rest_url() )
+                        sanitize_url( get_rest_url() )
                 ),
                 'after'
@@ -751 +751 @@
                 'wpApiSettings',
                 array(
-                        'root'          => esc_url_raw( get_rest_url() ),
+                        'root'          => sanitize_url( get_rest_url() ),
                         'nonce'         => wp_installing() ? '' : wp_create_nonce( 'wp_rest' ),
                         'versionString' => 'wp/v2/',