Changeset 57925 for trunk/src/wp-includes/l10n.php

Timestamp:

04/04/2024 01:54:12 PM (3 years ago)

Author:

swissspidy

Message:

I18N: Bail early if an invalid text domain is passed to load_textdomain() et al.

Some plugins pass invalid values such as null instead of a string, which has never been supported by WordPress (no translations are loaded) and was technically undefined behavior. With the introduction of the new l10n library in #59656, which has stricter type hints, this could end up causing warnings or even fatal errors.

This change adds a deliberate short-circuit to load_textdomain() & co. to better handle such a case and document that it is not supported.

Props verygoode, swissspidy.
Fixes #60888.

File:

• trunk/src/wp-includes/l10n.php (modified) (4 diffs)

trunk/src/wp-includes/l10n.php

@@ -729 +729 @@
         $l10n_unloaded = (array) $l10n_unloaded;
 
+        if ( ! is_string( $domain ) ) {
+                return false;
+        }
+
         /**
          * Filters whether to short-circuit loading .mo file.
@@ -990 +994 @@
         global $wp_textdomain_registry;
 
+        if ( ! is_string( $domain ) ) {
+                return false;
+        }
+
         /**
          * Filters a plugin's locale.
@@ -1038 +1046 @@
         global $wp_textdomain_registry;
 
+        if ( ! is_string( $domain ) ) {
+                return false;
+        }
+
         /** This filter is documented in wp-includes/l10n.php */
         $locale = apply_filters( 'plugin_locale', determine_locale(), $domain );
@@ -1076 +1088 @@
         /** @var WP_Textdomain_Registry $wp_textdomain_registry */
         global $wp_textdomain_registry;
+
+        if ( ! is_string( $domain ) ) {
+                return false;
+        }
 
         /**