Skip to content

Handle non-string values in WP_HTML_Tag_Processor #9545

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 8 commits into from
Closed

Handle non-string values in WP_HTML_Tag_Processor #9545

Changes from 1 commit
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
a10ab72
Handle non-string values in WP_HTML_Tag_Processor
kraftbj Aug 20, 2025
1549291
Trac ticket number
kraftbj Aug 22, 2025
e366ee3
Remove the since annotation
kraftbj Aug 22, 2025
96343a3
Merge remote-tracking branch 'origin/trunk' into update/html-tag-proe…
kraftbj Sep 30, 2025
884dc04
Defensive coding for non-strings in ::create_fragment and ::create_fu…
kraftbj Sep 30, 2025
8d2adae
Add HTML processor doing it wrong tests
sirreal Oct 1, 2025
d27eb39
Use expectedIncorrectUsage test annotation over method
sirreal Oct 1, 2025
870a819
Merge branch 'trunk' into update/html-tag-proecssor-null
sirreal Oct 1, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Defensive coding for non-strings in ::create_fragment and ::create_fu… 
…ll_parser
  • Loading branch information
@kraftbj
kraftbj committed Sep 30, 2025
commit 884dc042d1bf7152f7fd96723923b41c87f79c44
17 changes: 17 additions & 0 deletions src/wp-includes/html-api/class-wp-html-processor.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -297,6 +297,15 @@ public static function create_fragment( $html, $context = '<body>', $encoding =
return null;
}

if ( ! is_string( $html ) ) {
_doing_it_wrong(
__METHOD__,
__( 'The HTML parameter must be a string.' ),
'6.9.0'
);
return null;
}

$context_processor = static::create_full_parser( "<!DOCTYPE html>{$context}", $encoding );
if ( null === $context_processor ) {
return null;
Expand Down Expand Up @@ -339,6 +348,14 @@ public static function create_full_parser( $html, $known_definite_encoding = 'UT
if ( 'UTF-8' !== $known_definite_encoding ) {
return null;
}
if ( ! is_string( $html ) ) {
_doing_it_wrong(
__METHOD__,
__( 'The HTML parameter must be a string.' ),
'6.9.0'
);
return null;
}

$processor = new static( $html, self::CONSTRUCTOR_UNLOCK_CODE );
$processor->state->encoding = $known_definite_encoding;
Expand Down
Loading