Changeset 5389 for sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/standalone/class-plugins-info-api.php

Timestamp:

04/20/2017 12:29:51 PM (8 years ago)

Author:

dd32

Message:

Plugin Directory: After [5388] move jsonp sanitization into the class rather than the calling script.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/standalone/class-plugins-info-api.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/plugin-directory/standalone/class-plugins-info-api.php

@@ -20 +20 @@
     function __construct( $format = 'json' ) {
         if ( is_array( $format ) && 'jsonp' == $format[0] ) {
-            $this->jsonp = $format[1];
+            $this->jsonp = preg_replace( '/[^a-zA-Z0-9_]/', '', $format[1] );
             $format = 'jsonp';
         }