sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Allow tel: and fax: protocols. Wrangle the last hardcoded protocol enumeration so that it uses wp_allowed_protocols(). fixes #21081

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@21170 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Mark Jaquith 2012-06-28 20:30:10 +00:00
parent 898fd19d0e
commit bfd2e57437
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
wp-admin/includes/user.php
View File

@ -69,7 +69,8 @@ function edit_user( $user_id = 0 ) {
$user->user_url = ''; $user->user_url = '';
} else { } else {
$user->user_url = esc_url_raw( $_POST['url'] ); $user->user_url = esc_url_raw( $_POST['url'] );
$user->user_url = preg_match('/^(https?|ftps?|mailto|news|irc|gopher|nntp|feed|telnet):/is', $user->user_url) ? $user->user_url : 'http://'.$user->user_url; $protocols = implode( '|', array_map( 'preg_quote', wp_allowed_protocols() ) );
$user->user_url = preg_match('/^(' . $protocols . '):/is', $user->user_url) ? $user->user_url : 'http://'.$user->user_url;
} }
} }
if ( isset( $_POST['first_name'] ) ) if ( isset( $_POST['first_name'] ) )

2
wp-includes/functions.php
View File

@ -3508,7 +3508,7 @@ function wp_allowed_protocols() {
static $protocols; static $protocols;
if ( empty( $protocols ) ) { if ( empty( $protocols ) ) {
$protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn' ); $protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn', 'tel', 'fax' );
$protocols = apply_filters( 'kses_allowed_protocols', $protocols ); $protocols = apply_filters( 'kses_allowed_protocols', $protocols );
} }