Context Navigation

class-wp-html-processor.php

Timestamp:

10/01/2025 12:57:19 PM (5 months ago)

Author:

jonsurrell

Message:

HTML API: Ensure non-string HTML input is safely handled.

Prevents an issue where passing null to HTML API constructors could result in runtime errors.

Props kraftbj, jonsurrell, westonruter.
Fixes #63854.

File:

-                      r60647
+                      r60887
+        }
+        if ( ! is_string( $html ) ) {
+            _doing_it_wrong(
+                __METHOD__,
+                __( 'The HTML parameter must be a string.' ),
+                '6.9.0'
+            );
+            return null;
+        }
         $context_processor = static::create_full_parser( "<!DOCTYPE html>{$context}", $encoding );
         if ( null === $context_processor ) {
 …
     public static function create_full_parser( $html, $known_definite_encoding = 'UTF-8' ) {
         if ( 'UTF-8' !== $known_definite_encoding ) {
+            return null;
+        }
+        if ( ! is_string( $html ) ) {
+            _doing_it_wrong(
+                __METHOD__,
+                __( 'The HTML parameter must be a string.' ),
+                '6.9.0'
+            );
             return null;
+        }

Note: See TracChangeset for help on using the changeset viewer.