Changeset 60887 for trunk/src/wp-includes/html-api/class-wp-html-tag-processor.php

Timestamp:

10/01/2025 12:57:19 PM (5 months ago)

Author:

jonsurrell

Message:

HTML API: Ensure non-string HTML input is safely handled.

Prevents an issue where passing null to HTML API constructors could result in runtime errors.

Developed in ​https://github.com/WordPress/wordpress-develop/pull/9545.

Props kraftbj, jonsurrell, westonruter.
Fixes #63854.

File:

• trunk/src/wp-includes/html-api/class-wp-html-tag-processor.php (modified) (1 diff)

trunk/src/wp-includes/html-api/class-wp-html-tag-processor.php

@@ -835 +835 @@
      */
     public function __construct( $html ) {
+        if ( ! is_string( $html ) ) {
+            _doing_it_wrong(
+                __METHOD__,
+                __( 'The HTML parameter must be a string.' ),
+                '6.9.0'
+            );
+            $html = '';
+        }
         $this->html = $html;
     }