From e75671452cdbe195f3a9622e5a1a8d92da82ecb0 Mon Sep 17 00:00:00 2001 From: Andrew Nacin Date: Tue, 4 Sep 2012 03:36:19 +0000 Subject: [PATCH] Properly delimit URLs by \r, \n, \t *or* a space in sanitize_trackback_urls(). Fixes multiple trackback URL usage. props SergeyBiryukov, fixes #21624 for trunk. git-svn-id: http://core.svn.wordpress.org/trunk@21718 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/formatting.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wp-includes/formatting.php b/wp-includes/formatting.php index a1c3f826c5..201f7c8212 100644 --- a/wp-includes/formatting.php +++ b/wp-includes/formatting.php @@ -3235,7 +3235,7 @@ function sanitize_mime_type( $mime_type ) { * @return string URLs starting with the http or https protocol, separated by a carriage return. */ function sanitize_trackback_urls( $to_ping ) { - $urls_to_ping = preg_split( '/\r\n\t /', trim( $to_ping ), -1, PREG_SPLIT_NO_EMPTY ); + $urls_to_ping = preg_split( '/[\r\n\t ]/', trim( $to_ping ), -1, PREG_SPLIT_NO_EMPTY ); foreach ( $urls_to_ping as $k => $url ) { if ( !preg_match( '#^https?://.#i', $url ) ) unset( $urls_to_ping[$k] );