WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Customize: Trim whitespace for URLs supplied for `external_header_video` to prevent `esc_url_raw()` from making them invalid. 

Props tyxla.
See #38172.
Fixes #39125.

Built from https://develop.svn.wordpress.org/trunk@39560


git-svn-id: http://core.svn.wordpress.org/trunk@39500 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
Weston Ruter 2016-12-10 07:00:45 +00:00
parent 6527c24ab1
commit a366e58135
2 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
wp-includes/class-wp-customize-manager.php
View File

@ -3896,7 +3896,7 @@ final class WP_Customize_Manager {
$this->add_setting( 'external_header_video', array( $this->add_setting( 'external_header_video', array(
'theme_supports' => array( 'custom-header', 'video' ), 'theme_supports' => array( 'custom-header', 'video' ),
'transport' => 'postMessage', 'transport' => 'postMessage',
'sanitize_callback' => 'esc_url_raw', 'sanitize_callback' => array( $this, '_sanitize_external_header_video' ),
'validate_callback' => array( $this, '_validate_external_header_video' ), 'validate_callback' => array( $this, '_validate_external_header_video' ),
) ); ) );
@ -4318,6 +4318,18 @@ final class WP_Customize_Manager {
return $validity; return $validity;
} }
/**
* Callback for sanitizing the external_header_video value.
*
* @since 4.7.1
*
* @param string $value URL.
* @return string Sanitized URL.
*/
public function _sanitize_external_header_video( $value ) {
return esc_url_raw( trim( $value ) );
}
/** /**
* Callback for rendering the custom logo, used in the custom_logo partial. * Callback for rendering the custom logo, used in the custom_logo partial.
* *

2
wp-includes/version.php
View File

@ -4,7 +4,7 @@
* *
* @global string $wp_version * @global string $wp_version
*/ */
$wp_version = '4.8-alpha-39559'; $wp_version = '4.8-alpha-39560';
/** /**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema. * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.