Changeset 63664

Timestamp:

09/17/2026 05:33:45 PM (4 weeks ago)

Author:

desrosj

Message:

Themes: Escape the theme installer preview route value.

Merges r63658 to the 7.1 branch.

Props xknown, villanovachile, jorbin, jonsurrell.

Location:

branches/7.1

Files:

• . (modified) (1 prop)
• src/js/_enqueues/wp/theme.js (modified) (1 diff)

branches/7.1/src/js/_enqueues/wp/theme.js

@@ -2083 +2083 @@
                                 self.view.collection.trigger( 'update' );
 
-                                // Open the theme preview.
+                                // Open the theme preview. The slug comes from the URL, so escape it.
                                 self.view.collection.once( 'query:success', function() {
-                                        $( 'div[data-slug="' + slug + '"]' ).trigger( 'click' );
+                                        $( 'div.theme[data-slug="' + $.escapeSelector( slug ) + '"]' ).trigger( 'click' );
                                 });