Changeset 55765 for branches/6.2/src/wp-includes/l10n.php

Timestamp:

05/16/2023 02:40:11 PM (3 years ago)

Author:

audrasjb

Message:

I18N: Introduce sanitization function for locale.

Introduce the sanitize_locale_name() for sanitizing user input of locales.

Props xknown, timothyblynjacobs, ocean90, peterwilsoncc.
Merges [55760] to branch 6.2.

File:

• branches/6.2/src/wp-includes/l10n.php (modified) (1 diff)

branches/6.2/src/wp-includes/l10n.php

@@ -150 +150 @@
 
         if ( ! empty( $_GET['wp_lang'] ) ) {
-                $wp_lang = sanitize_text_field( $_GET['wp_lang'] );
+                $wp_lang = sanitize_locale_name( wp_unslash( $_GET['wp_lang'] ) );
         } elseif ( ! empty( $_COOKIE['wp_lang'] ) ) {
-                $wp_lang = sanitize_text_field( $_COOKIE['wp_lang'] );
+                $wp_lang = sanitize_locale_name( wp_unslash( $_COOKIE['wp_lang'] ) );
         }