From 8b90f3c7e543fdb4af2744314f84eaf4175d0956 Mon Sep 17 00:00:00 2001
From: Andrew Ozz <azaozz@git.wordpress.org>
Date: Wed, 30 Nov 2011 21:05:22 +0000
Subject: [PATCH] Sanitize options for resizing in the uploader, props mhauan,
 nacin, fixes #19399

git-svn-id: https://develop.svn.wordpress.org/trunk@19494 602fd350-edb4-49c9-b593-d223f7449a82
---
 wp-admin/includes/media.php | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/wp-admin/includes/media.php b/wp-admin/includes/media.php
index 0bf50c1d68..975bbd380e 100644
--- a/wp-admin/includes/media.php
+++ b/wp-admin/includes/media.php
@@ -1350,7 +1350,16 @@ $plupload_init = apply_filters( 'plupload_init', $plupload_init );
 ?>
 
 <script type="text/javascript">
-var resize_height = <?php echo get_option('large_size_h', 1024); ?>, resize_width = <?php echo get_option('large_size_w', 1024); ?>,
+<?php
+// Verify size is an int. If not return default value.
+$large_size_h = absint( get_option('large_size_h') );
+if( !$large_size_h )
+	$large_size_h = 1024;
+$large_size_w = absint( get_option('large_size_w') );
+if( !$large_size_w )
+	$large_size_w = 1024;
+?>
+var resize_height = <?php echo $large_size_h; ?>, resize_width = <?php echo $large_size_w; ?>,
 wpUploaderInit = <?php echo json_encode($plupload_init); ?>;
 </script>