Context Navigation

class-wp-customize-selective-refresh.php

Timestamp:

08/27/2025 10:32:57 AM (11 months ago)

Author:

jonsurrell

Message:

Scripts: Use appropriate JSON encoding flags for script tags.

wp_json_encode() with default arguments is insufficient to safely escape JSON for script tags. Use JSON_HEX_TAG | JSON_UNESCAPED_SLASHES flags.

Props devasheeshkaul, jonsurrell, siliconforks.
Fixes #63851.

File:

r56687	r60681
194	194
195	195	// Export data to JS.
196		wp_print_inline_script_tag( sprintf( 'var _customizePartialRefreshExports = %s;', wp_json_encode( $exports ) ) );
	196	wp_print_inline_script_tag( sprintf( 'var _customizePartialRefreshExports = %s;', wp_json_encode( $exports, JSON_HEX_TAG \| JSON_UNESCAPED_SLASHES ) ) );
197	197	}
198	198

Note: See TracChangeset for help on using the changeset viewer.