Don't unslash variables that came from wp_reset_vars(). see #21767.

git-svn-id: http://core.svn.wordpress.org/trunk@23580 1a063a9b-81f0-0310-95a4-ce76da25c4cd
splashmedia · Mar 1, 2013 · b96c604 · b96c604
1 parent 3a86ceb
commit b96c604
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 5 deletions.
diff --git a/wp-admin/plugin-editor.php b/wp-admin/plugin-editor.php
@@ -27,10 +27,9 @@
 if ( empty($plugins) )
 	wp_die( __('There are no plugins installed on this site.') );
 
-if ( isset($_REQUEST['file']) )
-	$plugin = wp_unslash($_REQUEST['file']);
-
-if ( empty($plugin) ) {
+if ( $file ) {
+	$plugin = $file;
+} elseif ( empty( $plugin ) ) {
 	$plugin = array_keys($plugins);
 	$plugin = $plugin[0];
 }

diff --git a/wp-admin/theme-editor.php b/wp-admin/theme-editor.php
@@ -68,7 +68,7 @@
 	$relative_file = 'style.css';
 	$file = $allowed_files['style.css'];
 } else {
-	$relative_file = wp_unslash( $file );
+	$relative_file = $file;
 	$file = $theme->get_stylesheet_directory() . '/' . $relative_file;
 }