Changeset 10478

Timestamp:

12/01/2020 05:46:45 AM (4 years ago)

Author:

dd32

Message:

Trac: Mentions Handler: unslash the JSON before decoding it.

Prior to [10476] the POST variables were accessed prior to WordPress loading, which resulted in non-slashed content.
After [10476] it's now slashed as it's accessed after WordPress loading.

File:

• sites/trunk/api.wordpress.org/public_html/dotorg/trac/mentions-handler.php (modified) (1 diff)

sites/trunk/api.wordpress.org/public_html/dotorg/trac/mentions-handler.php

@@ -12 +12 @@
 }
 
-$payload = json_decode( $_POST['payload'] );
+$payload = json_decode( wp_unslash( $_POST['payload'] ) );
 
 // Debug to figure out why the incoming JSON is sometimes not able to be parsed, despite appearing to be valid.