Changeset 58066 for branches/6.5/src/wp-includes/l10n.php

Timestamp:

04/30/2024 09:45:39 AM (5 months ago)

Author:

swissspidy

Message:

I18N: Bail early if an invalid text domain is passed to load_textdomain() et al.

Some plugins pass invalid values such as null instead of a string, which has never been supported by WordPress (no translations are loaded) and was technically undefined behavior. With the introduction of the new l10n library in #59656, which has stricter type hints, this could end up causing warnings or even fatal errors.

This change adds a deliberate short-circuit to load_textdomain() & co. to better handle such a case and document that it is not supported.

Merges [57925] to the 6.5 branch.
Reviewed by jorbin.

Props verygoode, swissspidy.
Fixes #60888.

Location:

branches/6.5

Files:

• . (modified) (1 prop)
• src/wp-includes/l10n.php (modified) (4 diffs)

branches/6.5/src/wp-includes/l10n.php

@@ -729 +729 @@
     $l10n_unloaded = (array) $l10n_unloaded;
 
+    if ( ! is_string( $domain ) ) {
+        return false;
+    }
+
     /**
      * Filters whether to short-circuit loading .mo file.
@@ -990 +994 @@
     global $wp_textdomain_registry;
 
+    if ( ! is_string( $domain ) ) {
+        return false;
+    }
+
     /**
      * Filters a plugin's locale.
@@ -1038 +1046 @@
     global $wp_textdomain_registry;
 
+    if ( ! is_string( $domain ) ) {
+        return false;
+    }
+
     /** This filter is documented in wp-includes/l10n.php */
     $locale = apply_filters( 'plugin_locale', determine_locale(), $domain );
@@ -1076 +1088 @@
     /** @var WP_Textdomain_Registry $wp_textdomain_registry */
     global $wp_textdomain_registry;
+
+    if ( ! is_string( $domain ) ) {
+        return false;
+    }
 
     /**