From 18610ef0adcb7faecd2e4335af406de64f461b36 Mon Sep 17 00:00:00 2001 From: Scott Taylor Date: Wed, 11 Feb 2015 19:10:46 +0000 Subject: [PATCH] Protect `
` tags when parsing oEmbed responses in
 `WP_oEmbed::_strip_newlines()` in `DOMDocument` is available.

Fixes #31214.


git-svn-id: https://develop.svn.wordpress.org/trunk@31415 602fd350-edb4-49c9-b593-d223f7449a82
---
 src/wp-includes/class-oembed.php | 26 +++++++++++++++++++++++---
 1 file changed, 23 insertions(+), 3 deletions(-)

diff --git a/src/wp-includes/class-oembed.php b/src/wp-includes/class-oembed.php
index f5b558b322..8891d2e2a9 100644
--- a/src/wp-includes/class-oembed.php
+++ b/src/wp-includes/class-oembed.php
@@ -559,10 +559,30 @@ class WP_oEmbed {
 	 * @return string Possibly modified $html
 	 */
 	public function _strip_newlines( $html, $data, $url ) {
-		if ( false !== strpos( $html, "\n" ) )
-			$html = str_replace( array( "\r\n", "\n" ), '', $html );
+		if ( false === strpos( $html, "\n" ) ) {
+			return $html;
+		}
 
-		return $html;
+		$pre = array();
+		$tokens = array();
+		if ( class_exists( 'DOMDocument' ) ) {
+			$token = '__PRE__';
+			$replace = array();
+			$dom = new DOMDocument();
+			$dom->loadHTML( $html );
+			$tags = $dom->getElementsByTagName( 'pre' );
+			foreach ( $tags as $i => $tag ) {
+				$tag_html = $dom->saveHTML( $tag );
+				$tag_token = $token . $i;
+				$replace[ $tag_token ] = $tag_html;
+				$html = str_replace( $tag_html, $tag_token, $html );
+			}
+			$pre = array_values( $replace );
+			$tokens = array_keys( $replace );
+		}
+
+		$stripped = str_replace( array( "\r\n", "\n" ), '', $html );
+		return str_replace( $tokens, $pre, $stripped );
 	}
 }