Wordpress 4.5.3

[autoinstalls/wordpress.git] / wp-includes / class-wp-customize-manager.php

diff --git a/wp-includes/class-wp-customize-manager.php b/wp-includes/class-wp-customize-manager.php
index 8057e57ae0fb49c6250d04d29a53ed3c9a0668b2..74819516bd6aaadb2485a4ad1373295807a02dcc 100644 (file)
--- a/wp-includes/class-wp-customize-manager.php
+++ b/wp-includes/class-wp-customize-manager.php
@@ -1542,6 +1542,7 @@ final class WP_Customize_Manager {
         * @param string $preview_url URL to be previewed.
         */
        public function set_preview_url( $preview_url ) {
+               $preview_url = esc_url_raw( $preview_url );
                $this->preview_url = wp_validate_redirect( $preview_url, home_url( '/' ) );
        }
 
@@ -1573,6 +1574,7 @@ final class WP_Customize_Manager {
         * @param string $return_url URL for return link.
         */
        public function set_return_url( $return_url ) {
+               $return_url = esc_url_raw( $return_url );
                $return_url = remove_query_arg( wp_removable_query_args(), $return_url );
                $return_url = wp_validate_redirect( $return_url );
                $this->return_url = $return_url;