Changeset 55760 for trunk/src/wp-includes/l10n.php

Timestamp:

05/16/2023 02:16:39 PM (19 months ago)

Author:

audrasjb

Message:

I18N: Introduce sanitization function for locale.

Introduce the sanitize_locale_name() for sanitizing user input of locales.

Props xknown, timothyblynjacobs, ocean90, peterwilsoncc.

File:

• trunk/src/wp-includes/l10n.php (modified) (1 diff)

trunk/src/wp-includes/l10n.php

@@ -150 +150 @@
 
     if ( ! empty( $_GET['wp_lang'] ) ) {
-        $wp_lang = sanitize_text_field( $_GET['wp_lang'] );
+        $wp_lang = sanitize_locale_name( wp_unslash( $_GET['wp_lang'] ) );
     } elseif ( ! empty( $_COOKIE['wp_lang'] ) ) {
-        $wp_lang = sanitize_text_field( $_COOKIE['wp_lang'] );
+        $wp_lang = sanitize_locale_name( wp_unslash( $_COOKIE['wp_lang'] ) );
     }