Make WordPress Core


Ignore:
Timestamp:
10/01/2025 12:57:19 PM (5 months ago)
Author:
jonsurrell
Message:

HTML API: Ensure non-string HTML input is safely handled.

Prevents an issue where passing null to HTML API constructors could result in runtime errors.

Developed in https://github.com/WordPress/wordpress-develop/pull/9545.

Props kraftbj, jonsurrell, westonruter.
Fixes #63854.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • trunk/tests/phpunit/tests/html-api/wpHtmlProcessor.php

    r59467 r60887  
    3535    public function test_warns_that_the_static_creator_methods_should_be_called_instead_of_the_public_constructor() {
    3636        new WP_HTML_Processor( '<p>Light roast.</p>' );
     37    }
     38
     39    /**
     40     * @ticket 63854
     41     *
     42     * @covers ::create_fragment
     43     * @expectedIncorrectUsage WP_HTML_Processor::create_fragment
     44     */
     45    public function test_create_fragment_validates_html_parameter() {
     46        $processor = WP_HTML_Processor::create_fragment( null );
     47        $this->assertNull( $processor );
     48    }
     49
     50    /**
     51     * @ticket 63854
     52     *
     53     * @covers ::create_full_parser
     54     * @expectedIncorrectUsage WP_HTML_Processor::create_full_parser
     55     */
     56    public function test_create_full_parser_validates_html_parameter() {
     57        $processor = WP_HTML_Processor::create_full_parser( null );
     58        $this->assertNull( $processor );
    3759    }
    3860
Note: See TracChangeset for help on using the changeset viewer.