Treat URL schemes as case insensitive when sanitizing them in esc_url().
props mdawaffe. fixes #23187. tests: [1184/tests] git-svn-id: https://develop.svn.wordpress.org/trunk@23303 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
8cf528d255
commit
f0e451a30f
|
@ -2603,10 +2603,11 @@ function esc_url( $url, $protocols = null, $_context = 'display' ) {
|
||||||
|
|
||||||
if ( ! is_array( $protocols ) )
|
if ( ! is_array( $protocols ) )
|
||||||
$protocols = wp_allowed_protocols();
|
$protocols = wp_allowed_protocols();
|
||||||
if ( wp_kses_bad_protocol( $url, $protocols ) != $url )
|
$good_protocol_url = wp_kses_bad_protocol( $url, $protocols );
|
||||||
|
if ( strtolower( $good_protocol_url ) != strtolower( $url ) )
|
||||||
return '';
|
return '';
|
||||||
|
|
||||||
return apply_filters('clean_url', $url, $original_url, $_context);
|
return apply_filters('clean_url', $good_protocol_url, $original_url, $_context);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|
Loading…
Reference in New Issue