Make wp_kses_no_null() remove any invalid control characters in a string.

props mauteri, miqrogroove.
fixes #28506.
Built from https://develop.svn.wordpress.org/trunk@28942


git-svn-id: http://core.svn.wordpress.org/trunk@28740 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Sergey Biryukov 2014-07-01 18:01:17 +00:00
parent 3705febc40
commit 788597141a
1 changed files with 4 additions and 2 deletions

View File

@ -991,7 +991,9 @@ function wp_kses_bad_protocol($string, $allowed_protocols) {
} }
/** /**
* Removes any null characters in $string. * Removes any invalid control characters in $string.
*
* Also removes any instance of the '\0' string.
* *
* @since 1.0.0 * @since 1.0.0
* *
@ -999,7 +1001,7 @@ function wp_kses_bad_protocol($string, $allowed_protocols) {
* @return string * @return string
*/ */
function wp_kses_no_null($string) { function wp_kses_no_null($string) {
$string = preg_replace('/\0+/', '', $string); $string = preg_replace('/[\x00-\x08\x0B\x0C\x0E-\x1F]/', '', $string);
$string = preg_replace('/(\\\\0)+/', '', $string); $string = preg_replace('/(\\\\0)+/', '', $string);
return $string; return $string;