sergiotarxz
/
Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Treat URL schemes as case insensitive when sanitizing them in esc_url(). 

props mdawaffe.
fixes #23187.
tests: [1184/tests]



git-svn-id: https://develop.svn.wordpress.org/trunk@23303 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2013-01-17 15:07:32 +00:00
parent 8cf528d255
commit f0e451a30f
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
wp-includes/formatting.php
View File

@ -2603,10 +2603,11 @@ function esc_url( $url, $protocols = null, $_context = 'display' ) {
if ( ! is_array( $protocols ) )
$protocols = wp_allowed_protocols();
if ( wp_kses_bad_protocol( $url, $protocols ) != $url )
$good_protocol_url = wp_kses_bad_protocol( $url, $protocols );
if ( strtolower( $good_protocol_url ) != strtolower( $url ) )
return '';
return apply_filters('clean_url', $url, $original_url, $_context);
return apply_filters('clean_url', $good_protocol_url, $original_url, $_context);
}
/**