mirror of
https://github.com/WordPress/WordPress.git
synced 2025-01-03 15:08:10 +01:00
Treat URL schemes as case insensitive when sanitizing them in esc_url().
props mdawaffe. fixes #23187. tests: [1184/tests] git-svn-id: http://core.svn.wordpress.org/trunk@23303 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
b59edea3cb
commit
c9a6c4ba0c
@ -2603,10 +2603,11 @@ function esc_url( $url, $protocols = null, $_context = 'display' ) {
|
||||
|
||||
if ( ! is_array( $protocols ) )
|
||||
$protocols = wp_allowed_protocols();
|
||||
if ( wp_kses_bad_protocol( $url, $protocols ) != $url )
|
||||
$good_protocol_url = wp_kses_bad_protocol( $url, $protocols );
|
||||
if ( strtolower( $good_protocol_url ) != strtolower( $url ) )
|
||||
return '';
|
||||
|
||||
return apply_filters('clean_url', $url, $original_url, $_context);
|
||||
return apply_filters('clean_url', $good_protocol_url, $original_url, $_context);
|
||||
}
|
||||
|
||||
/**
|
||||
|
Loading…
Reference in New Issue
Block a user