Wrong URL for theme screenshot

[pavelevap]

Theme directory sometimes contains "space", I saw for example directory "Tuscan 1.0" etc. But in this case, screenshot in not shown on theme list (there is only icon of missing picture), because URL is transformed and space stripped:

/wp-content/themes/Tuscan1.0/screenshot.png

I understand that it is not best practice, but it is regression (in WP 3.3.x it worked well).

Also, it would be better to show some simple default picture for themes without screenshot (for example "This theme has not screenshot yet") instead of grey place...

[SergeyBiryukov]

The space is stripped by esc_url(), since the space is not encoded:
​http://core.trac.wordpress.org/browser/tags/3.4.1/wp-admin/includes/class-wp-themes-list-table.php#L156

In 3.3, the screenshot was output directly:
​http://core.trac.wordpress.org/browser/tags/3.3.3/wp-admin/includes/class-wp-themes-list-table.php#L160

I guess get_*_directory_uri() should return encoded results.

[SergeyBiryukov]

21749.2.patch​ would break if the theme is one directory deeper:

wp-content/themes/Tuscan 1.0/Tuscan

[pavelevap]

There is also another theme example which does not work in latest trunk (in deeper directory):

wp-content/themes/Some_Theme/Theme 1.0

[nacin]

get_stylesheet_directory_uri() and get_template_directory_uri() have always been this way. I want to think about what could break if we change that now. On the other hand, we should be able to make some changes to WP_Theme.

21749.3.patch​ is a good start, though Live Preview and Preview links remain broken. We can fix that with a change in the list table and in wp_customize_url(). It looks like the preview output buffer on the frontend still fails due to spaces not being allowed in the regex in preview_theme(). That's a long-standing bug, though.

Looking to do some unit tests for this, then run with it.

[nacin]

​[UT1004]

[nacin]

In [21712]:

URL encode the stylesheet directory values passed to WP_Theme's get_stylesheet_directory_uri() and get_template_directory_uri(). props SergeyBiryukov, see #21749.

[nacin]

In [21713]:

URL encode the theme stylesheet passed into wp_customize_url(). see #21749.

[nacin]

21749.diff​ is the result of an audit of 'stylesheet' or 'template' used as query args. (Might have missed something, but got all the obvious ones.)

Some of these are actually okay, such as whenever it is passed into wp_nonce_url(), since wp_nonce_url() uses add_query_arg(), which ensures existing query args are encoded before appending new ones.

[nacin]

In [21714]:

URL encode the stylesheet directory values passed to WP_Theme's get_stylesheet_directory_uri() and get_template_directory_uri(). props SergeyBiryukov, see #21749. for the 3.4 branch.

[nacin]

Reviewed these again.

• ms-themes list table is almost exclusively sending an unencoded stylesheet through wp_nonce_url(), which will get it encoded. The only exception is wp-admin/themes.php, which happens to be a regression.
• The old-school preview links in class-wp-upgrader need urlencoded stylesheet values. This is a regression, though the Live Preview (fixed by [21713]) replaces these links in most situations.
• The network enable link in class-wp-upgrader goes through wp_nonce_url(), which will encode it, so it is not broken.
• In wp-admin/includes/theme.php (delete_theme()), this goes through wp_nonce_url(), so it is not broken.
• The decoding in theme-editor.php is not intentional and should be removed, but does not break anything.

For 3.4: Merge [21713] to the branch. [21712] is already merged, see [21714]. Fix links in the upgrader. Ignore the "Edit" link in ms-themes.

For 3.5: Make sure all of 21749.diff​ makes it in, rather than relying on wp_nonce_url() to do the work.

[nacin]

In [21752]:

Fix old-school Preview links when a theme directory contains spaces. Fix the theme-editor.php link from MS themes screens when a theme directory contains spaces. see #21749.

[nacin]

In [21753]:

URL encode the theme stylesheet passed into wp_customize_url(). see #21749. Merges [21713] to the 3.4 branch.

[nacin]

In [21754]:

Fix old-school Preview links when a theme directory contains spaces. Fix the theme-editor.php link from MS themes screens when a theme directory contains spaces. see #21749. Merges [21752] to the 3.4 branch.

[nacin]

In [21755]:

Always URL-encode a stylesheet directory value before using it in a URL. These situations are saved by wp_nonce_url(), but we should not depend on that. see #21749, for trunk only.