mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2026-06-30 23:30:05 +00:00
Avoid preg backtrack limit errors with large posts when processing shortcodes. Props mdawaffe. fixes #15600
git-svn-id: https://develop.svn.wordpress.org/trunk@18952 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
@@ -148,7 +148,7 @@ function do_shortcode($content) {
|
||||
return $content;
|
||||
|
||||
$pattern = get_shortcode_regex();
|
||||
return preg_replace_callback('/'.$pattern.'/s', 'do_shortcode_tag', $content);
|
||||
return preg_replace_callback( "/$pattern/s", 'do_shortcode_tag', $content );
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -159,11 +159,12 @@ function do_shortcode($content) {
|
||||
*
|
||||
* The regular expression contains 6 different sub matches to help with parsing.
|
||||
*
|
||||
* 1/6 - An extra [ or ] to allow for escaping shortcodes with double [[]]
|
||||
* 1 - An extra [ to allow for escaping shortcodes with double [[]]
|
||||
* 2 - The shortcode name
|
||||
* 3 - The shortcode argument list
|
||||
* 4 - The self closing /
|
||||
* 5 - The content of a shortcode when it wraps some content.
|
||||
* 6 - An extra ] to allow for escaping shortcodes with double [[]]
|
||||
*
|
||||
* @since 2.5
|
||||
* @uses $shortcode_tags
|
||||
@@ -175,8 +176,36 @@ function get_shortcode_regex() {
|
||||
$tagnames = array_keys($shortcode_tags);
|
||||
$tagregexp = join( '|', array_map('preg_quote', $tagnames) );
|
||||
|
||||
// WARNING! Do not change this regex without changing do_shortcode_tag() and strip_shortcodes()
|
||||
return '(.?)\[('.$tagregexp.')\b(.*?)(?:(\/))?\](?:(.+?)\[\/\2\])?(.?)';
|
||||
// WARNING! Do not change this regex without changing do_shortcode_tag() and strip_shortcode_tag()
|
||||
return
|
||||
'\\[' // Opening bracket
|
||||
. '(\\[?)' // 1: Optional second opening bracket for escaping shortcodes: [[tag]]
|
||||
. "($tagregexp)" // 2: Shortcode name
|
||||
. '\\b' // Word boundary
|
||||
. '(' // 3: Unroll the loop: Inside the opening shortcode tag
|
||||
. '[^\\]\\/]*' // Not a closing bracket or forward slash
|
||||
. '(?:'
|
||||
. '\\/(?!\\])' // A forward slash not followed by a closing bracket
|
||||
. '[^\\]\\/]*' // Not a closing bracket or forward slash
|
||||
. ')*?'
|
||||
. ')'
|
||||
. '(?:'
|
||||
. '(\\/)' // 4: Self closing tag ...
|
||||
. '\\]' // ... and closing bracket
|
||||
. '|'
|
||||
. '\\]' // Closing bracket
|
||||
. '(?:'
|
||||
. '(' // 5: Unroll the loop: Optionally, anything between the opening and closing shortcode tags
|
||||
. '[^\\[]*+' // Not an opening bracket
|
||||
. '(?:'
|
||||
. '\\[(?!\\/\\2\\])' // An opening bracket not followed by the closing shortcode tag
|
||||
. '[^\\[]*+' // Not an opening bracket
|
||||
. ')*+'
|
||||
. ')'
|
||||
. '\\[\\/\\2\\]' // Closing shortcode tag
|
||||
. ')?'
|
||||
. ')'
|
||||
. '(\\]?)'; // 6: Optional second closing brocket for escaping shortcodes: [[tag]]
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -290,9 +319,18 @@ function strip_shortcodes( $content ) {
|
||||
|
||||
$pattern = get_shortcode_regex();
|
||||
|
||||
return preg_replace('/'.$pattern.'/s', '$1$6', $content);
|
||||
return preg_replace_callback( "/$pattern/s", 'strip_shortcode_tag', $content );
|
||||
}
|
||||
|
||||
function strip_shortcode_tag( $m ) {
|
||||
// allow [[foo]] syntax for escaping a tag
|
||||
if ( $m[1] == '[' && $m[6] == ']' ) {
|
||||
return substr($m[0], 1, -1);
|
||||
}
|
||||
|
||||
return $m[1] . $m[6];
|
||||
}
|
||||
|
||||
add_filter('the_content', 'do_shortcode', 11); // AFTER wpautop()
|
||||
|
||||
?>
|
||||
?>
|
||||
|
||||
Reference in New Issue
Block a user