Changeset 10760 for branches/2.5/src/bp-core/bp-core-filters.php

Timestamp:

05/14/2016 04:52:11 PM (8 years ago)

Author:

r-a-y

Message:

Emails: Ensure that the email subject is HTML entity-decoded.

Fixes an issue when using email tokens that contain HTML special characters
in the email subject.

Fixes #6966 (2.5-branch)

File:

• branches/2.5/src/bp-core/bp-core-filters.php (modified) (2 diffs)

branches/2.5/src/bp-core/bp-core-filters.php

@@ -59 +59 @@
 add_filter( 'bp_email_set_content_plaintext', 'wp_strip_all_tags', 6 );
 add_filter( 'bp_email_set_subject', 'sanitize_text_field', 6 );
-
 
 /**
@@ -354 +353 @@
  * @since 2.5.0
  *
- * @param string $retval Current email content.
- * @param string $prop   Email property to check against.
- */
-function bp_email_plaintext_entity_decode( $retval, $prop ) {
-    if ( 'content_plaintext' !== $prop ) {
-        return $retval;
-    }
-
-    return html_entity_decode( $retval, ENT_QUOTES );
-}
-add_filter( 'bp_email_get_property', 'bp_email_plaintext_entity_decode', 10, 2 );
+ * @param string $retval    Current email content.
+ * @param string $prop      Email property to check against.
+ * @param string $transform Either 'raw' or 'replace-tokens'.
+ */
+function bp_email_plaintext_entity_decode( $retval, $prop, $transform ) {
+    switch ( $prop ) {
+        case 'content_plaintext' :
+        case 'subject' :
+            // Only decode if 'replace-tokens' is the current type.
+            if ( 'replace-tokens' === $transform ) {
+                return html_entity_decode( $retval, ENT_QUOTES );
+            } else {
+                return $retval;
+            }
+            break;
+
+        default :
+            return $retval;
+            break;
+    }
+}
+add_filter( 'bp_email_get_property', 'bp_email_plaintext_entity_decode', 10, 3 );
 
 /**