X-Git-Url: https://scripts.mit.edu/gitweb/autoinstalls/wordpress.git/blobdiff_plain/3f5685912e89eb3b0534acd85aa0946b1ca2bbe3..refs/tags/wordpress-4.0:/wp-includes/class-feed.php diff --git a/wp-includes/class-feed.php b/wp-includes/class-feed.php index cff43a17..9aa144a5 100644 --- a/wp-includes/class-feed.php +++ b/wp-includes/class-feed.php @@ -1,41 +1,42 @@ name = 'feed_' . $filename; $this->mod_name = 'feed_mod_' . $filename; - $this->lifetime = apply_filters('wp_feed_cache_transient_lifetime', $this->lifetime, $filename); + + $lifetime = $this->lifetime; + /** + * Filter the transient lifetime of the feed cache. + * + * @since 2.8.0 + * + * @param int $lifetime Cache duration in seconds. Default is 43200 seconds (12 hours). + * @param string $filename Unique identifier for the cache object. + */ + $this->lifetime = apply_filters( 'wp_feed_cache_transient_lifetime', $lifetime, $filename); } - function save($data) { + public function save($data) { if ( is_a($data, 'SimplePie') ) $data = $data->data; @@ -44,19 +45,19 @@ class WP_Feed_Cache_Transient { return true; } - function load() { + public function load() { return get_transient($this->name); } - function mtime() { + public function mtime() { return get_transient($this->mod_name); } - function touch() { + public function touch() { return set_transient($this->mod_name, time(), $this->lifetime); } - function unlink() { + public function unlink() { delete_transient($this->name); delete_transient($this->mod_name); return true; @@ -65,7 +66,7 @@ class WP_Feed_Cache_Transient { class WP_SimplePie_File extends SimplePie_File { - function WP_SimplePie_File($url, $timeout = 10, $redirects = 5, $headers = null, $useragent = null, $force_fsockopen = false) { + public function __construct($url, $timeout = 10, $redirects = 5, $headers = null, $useragent = null, $force_fsockopen = false) { $this->url = $url; $this->timeout = $timeout; $this->redirects = $redirects; @@ -75,7 +76,10 @@ class WP_SimplePie_File extends SimplePie_File { $this->method = SIMPLEPIE_FILE_SOURCE_REMOTE; if ( preg_match('/^http(s)?:\/\//i', $url) ) { - $args = array( 'timeout' => $this->timeout, 'redirection' => $this->redirects); + $args = array( + 'timeout' => $this->timeout, + 'redirection' => $this->redirects, + ); if ( !empty($this->headers) ) $args['headers'] = $this->headers; @@ -83,21 +87,54 @@ class WP_SimplePie_File extends SimplePie_File { if ( SIMPLEPIE_USERAGENT != $this->useragent ) //Use default WP user agent unless custom has been specified $args['user-agent'] = $this->useragent; - $res = wp_remote_request($url, $args); + $res = wp_safe_remote_request($url, $args); if ( is_wp_error($res) ) { $this->error = 'WP HTTP Error: ' . $res->get_error_message(); $this->success = false; } else { - $this->headers = $res['headers']; - $this->body = $res['body']; - $this->status_code = $res['response']['code']; + $this->headers = wp_remote_retrieve_headers( $res ); + $this->body = wp_remote_retrieve_body( $res ); + $this->status_code = wp_remote_retrieve_response_code( $res ); } } else { - if ( ! $this->body = file_get_contents($url) ) { - $this->error = 'file_get_contents could not read the file'; - $this->success = false; + $this->error = ''; + $this->success = false; + } + } +} + +/** + * WordPress SimplePie Sanitization Class + * + * Extension of the SimplePie_Sanitize class to use KSES, because + * we cannot universally count on DOMDocument being available + * + * @package WordPress + * @since 3.5.0 + */ +class WP_SimplePie_Sanitize_KSES extends SimplePie_Sanitize { + public function sanitize( $data, $type, $base = '' ) { + $data = trim( $data ); + if ( $type & SIMPLEPIE_CONSTRUCT_MAYBE_HTML ) { + if (preg_match('/(&(#(x[0-9a-fA-F]+|[0-9]+)|[a-zA-Z0-9]+)|<\/[A-Za-z][^\x09\x0A\x0B\x0C\x0D\x20\x2F\x3E]*' . SIMPLEPIE_PCRE_HTML_ATTRIBUTE . '>)/', $data)) { + $type |= SIMPLEPIE_CONSTRUCT_HTML; + } + else { + $type |= SIMPLEPIE_CONSTRUCT_TEXT; + } + } + if ( $type & SIMPLEPIE_CONSTRUCT_BASE64 ) { + $data = base64_decode( $data ); + } + if ( $type & ( SIMPLEPIE_CONSTRUCT_HTML | SIMPLEPIE_CONSTRUCT_XHTML ) ) { + $data = wp_kses_post( $data ); + if ( $this->output_encoding !== 'UTF-8' ) { + $data = $this->registry->call( 'Misc', 'change_encoding', array( $data, 'UTF-8', $this->output_encoding ) ); } + return $data; + } else { + return parent::sanitize( $data, $type, $base ); } } -} \ No newline at end of file +}