sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Don't unslash variables that came from wp_reset_vars(). see #21767.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@23580 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2013-03-01 18:59:54 +00:00
parent 3e811c5171
commit b617e4742a
2 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
wp-admin/plugin-editor.php
View File

@ -27,10 +27,9 @@ $plugins = get_plugins();
if ( empty($plugins) )
wp_die( __('There are no plugins installed on this site.') );
if ( isset($_REQUEST['file']) )
$plugin = wp_unslash($_REQUEST['file']);
if ( empty($plugin) ) {
if ( $file ) {
$plugin = $file;
} elseif ( empty( $plugin ) ) {
$plugin = array_keys($plugins);
$plugin = $plugin[0];
}

2
wp-admin/theme-editor.php
View File

@ -68,7 +68,7 @@ if ( empty( $file ) ) {
$relative_file = 'style.css';
$file = $allowed_files['style.css'];
} else {
$relative_file = wp_unslash( $file );
$relative_file = $file;
$file = $theme->get_stylesheet_directory() . '/' . $relative_file;
}