Changeset 55209 for trunk/src/wp-includes/formatting.php

Timestamp:

02/03/2023 12:46:18 PM (20 months ago)

Author:

audrasjb

Message:

Media: Replace consecutive periods in sanitize_file_name().

On some servers, consecutive periods in a filename can cause a 403 Forbidden response.
This changeset replaces consecutive periods with a single period, and adds related unit tests.

Props ArtZ91, costdev, SergeyBiryukov, arthurshlain, mukesh27.
Fixes #57242.

File:

• trunk/src/wp-includes/formatting.php (modified) (1 diff)

trunk/src/wp-includes/formatting.php

@@ -2048 +2048 @@
     $filename = str_replace( $special_chars, '', $filename );
     $filename = str_replace( array( '%20', '+' ), '-', $filename );
+    $filename = preg_replace( '/\.{2,}/', '.', $filename );
     $filename = preg_replace( '/[\r\n\t -]+/', '-', $filename );
     $filename = trim( $filename, '.-_' );