Changeset 13597

Timestamp:

10/17/2023 05:03:38 PM (12 months ago)

Author:

imath

Message:

Groups/Members block PHP callbacks: only allow supported avatar sizes

If the avatarSize property transported into the PHP render callbacks for the bp/members and bp/groups blocks is not set to "full" or "thumb", reset this property to "none".

Fix applied to Branch 11.0.

Location:

branches/11.0/src

Files:

• bp-groups/bp-groups-blocks.php (modified) (1 diff)
• bp-members/bp-members-blocks.php (modified) (1 diff)

branches/11.0/src/bp-groups/bp-groups-blocks.php

@@ -206 +206 @@
     if ( ! array_filter( $group_ids ) ) {
         return '';
+    }
+
+    // Make sure the avatar size exists.
+    if ( ! in_array( $block_args['avatarSize'], array( 'thumb', 'full' ), true ) ) {
+        $block_args['avatarSize'] = 'none';
     }
 

branches/11.0/src/bp-members/bp-members-blocks.php

@@ -197 +197 @@
     if ( ! array_filter( $member_ids ) ) {
         return '';
+    }
+
+    // Make sure the avatar size exists.
+    if ( ! in_array( $block_args['avatarSize'], array( 'thumb', 'full' ), true ) ) {
+        $block_args['avatarSize'] = 'none';
     }