XML-RPC: Recursively escape arrays as before, to avoid stomping nested objects. fixes #21767.

git-svn-id: https://develop.svn.wordpress.org/trunk@24731 602fd350-edb4-49c9-b593-d223f7449a82
2013-07-18 14:31:25 +00:00 · 2013-07-18 14:31:25 +00:00 · 93943d6cb9
parent 387d9cb94c
commit 93943d6cb9
1 changed files with 3 additions and 1 deletions
--- a/wp-includes/class-wp-xmlrpc-server.php
+++ b/wp-includes/class-wp-xmlrpc-server.php
@ -223,7 +223,9 @@ class wp_xmlrpc_server extends IXR_Server {
 			return wp_slash( $data );

 		foreach ( $data as &$v ) {
-			if ( ! is_object( $v ) )
+			if ( is_array( $v ) )
+				$this->escape( $v );
+			elseif ( ! is_object( $v ) )
 				$v = wp_slash( $v );
 		}
 	}