From e0ff6d86f4f38f3f1c86ad8b9a2979aa9a7561cb Mon Sep 17 00:00:00 2001 From: Jonathan Desrosiers Date: Thu, 6 Jan 2022 17:01:11 +0000 Subject: [PATCH] Query: Improve sanitization within `WP_Tax_Query`. Props dd32, xknown, peterwilsoncc, ehtis. git-svn-id: https://develop.svn.wordpress.org/trunk@52454 602fd350-edb4-49c9-b593-d223f7449a82 --- src/wp-includes/class-wp-tax-query.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/wp-includes/class-wp-tax-query.php b/src/wp-includes/class-wp-tax-query.php index 68b12ffbe4..a7a40cf21f 100644 --- a/src/wp-includes/class-wp-tax-query.php +++ b/src/wp-includes/class-wp-tax-query.php @@ -556,7 +556,11 @@ class WP_Tax_Query { return; } - $query['terms'] = array_unique( (array) $query['terms'] ); + if ( 'slug' === $query['field'] || 'name' === $query['field'] ) { + $query['terms'] = array_unique( (array) $query['terms'] ); + } else { + $query['terms'] = wp_parse_id_list( $query['terms'] ); + } if ( is_taxonomy_hierarchical( $query['taxonomy'] ) && $query['include_children'] ) { $this->transform_query( $query, 'term_id' );