Changeset 4424 for sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/class-plugin-directory.php

Timestamp:

11/26/2016 04:17:20 AM (8 years ago)

Author:

dd32

Message:

Plugin Directory: Limit the shortcodes in use on the plugin directory to those registered by the directory, and youtube, vimeo and videopress.
Fixes #2270.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/class-plugin-directory.php (modified) (2 diffs)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/class-plugin-directory.php

@@ -30 +30 @@
         add_action( 'init', array( $this, 'init' ) );
         add_action( 'init', array( $this, 'register_shortcodes' ) );
+        add_action( 'init', array( $this, 'remove_other_shortcodes' ), 999 );
         add_action( 'widgets_init', array( $this, 'register_widgets' ) );
         add_filter( 'post_type_link', array( $this, 'filter_post_type_link' ), 10, 2 );
@@ -347 +348 @@
         add_shortcode( 'wporg-plugins-reviews',     array( __NAMESPACE__ . '\Shortcodes\Reviews',     'display' ) );
         add_shortcode( 'readme-validator',          array( __NAMESPACE__ . '\Shortcodes\Readme_Validator',     'display' ) );
+    }
+
+    /**
+     * deregister any shortcodes which we haven't explicitly allowed.
+     */
+    public function remove_other_shortcodes() {
+        global $shortcode_tags;
+        $allowed_shortcodes = array(
+            'youtube',
+            'vimeo',
+            'videopress',
+            'wporg-plugins-developers',
+            'wporg-plugin-upload',
+            'wporg-plugins-screenshots',
+            'wporg-plugins-reviews',
+            'readme-validator'
+        );
+
+        $not_allowed_shortcodes = array_diff( array_keys( $shortcode_tags ), $allowed_shortcodes );
+        foreach ( $not_allowed_shortcodes as $tag ) {
+            remove_shortcode( $tag );
+        }
     }