XML-RPC: Recursively escape arrays as before, to avoid stomping nested objects. fixes #21767.

git-svn-id: http://core.svn.wordpress.org/trunk@24731 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2013-07-18 14:31:25 +00:00 · 2013-07-18 14:31:25 +00:00 · 929def2359
parent 94555444ab
commit 929def2359
1 changed files with 3 additions and 1 deletions
--- a/wp-includes/class-wp-xmlrpc-server.php
+++ b/wp-includes/class-wp-xmlrpc-server.php
@ -223,7 +223,9 @@ class wp_xmlrpc_server extends IXR_Server {
 			return wp_slash( $data );

 		foreach ( $data as &$v ) {
-			if ( ! is_object( $v ) )
+			if ( is_array( $v ) )
+				$this->escape( $v );
+			elseif ( ! is_object( $v ) )
 				$v = wp_slash( $v );
 		}
 	}