Changeset 7311

Timestamp:

06/15/2018 11:16:58 PM (6 years ago)

Author:

coreymckrill

Message:

Official WordPress Events: Avoid mangling Meetup API URLs

In r7304 we started using add_query_arg to build and modify the request URLs
to the Meetup API. This seems to have introduced an issue where the commas
separating values in various URL query parameters were being stripped out of
the "next" URLs returned by the API. In testing, sanitizing the "next" URL with
esc_url_raw instead of urldecode seems to fix the issue.

File:

• sites/trunk/wordpress.org/public_html/wp-content/plugins/official-wordpress-events/official-wordpress-events.php (modified) (1 diff)

sites/trunk/wordpress.org/public_html/wp-content/plugins/official-wordpress-events/official-wordpress-events.php

@@ -401 +401 @@
                 }
 
-                $request_url = isset( $body->meta->next ) ? urldecode( $body->meta->next ) : null;
+                $request_url = isset( $body->meta->next ) ? esc_url_raw( $body->meta->next ) : null;
             }
         }