-
Notifications
You must be signed in to change notification settings - Fork 800
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
image-cdn: Avoid fatal on bad img width/height #39208
Conversation
If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this.
Are you an Automattician? Please test your changes on all WordPress.com environments to help mitigate accidental explosions.
Interested in more tips and information?
|
Thank you for your PR! When contributing to Jetpack, we have a few suggestions that can help us test and review your patch:
This comment will be updated as you work on your PR and make changes. If you think that some of those checks are not needed for your PR, please explain why you think so. Thanks for cooperation 🤖 The e2e test report can be found here. Please note that it can take a few minutes after the e2e tests checks are complete for the report to be available. Follow this PR Review Process:
Still unsure? Reach out in #jetpack-developers for guidance! |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks!
If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this.
If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this.
* image-cdn: Avoid fatal on bad img width/height (#39208) If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this. * Update package version
If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this.
* image-cdn: Avoid fatal on bad img width/height (#39208) If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this. * Update package version
Wow. This slipped somehow. Thanks for quickly addressing it. |
If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this.
* image-cdn: Avoid fatal on bad img width/height (#39208) If the `<img>` tag has a value for `width` or `height` that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this. * Update package version
Proposed changes:
If the
<img>
tag has a value forwidth
orheight
that's neither an integer nor a percentage, this will cause a fatal error when the value is attempted to be used as an integer. Add validation to avoid this.This was introduced in #32700, the implicit validation included in the parameter extraction regex was lost when it was switched to use the HTML API.
Other information:
Jetpack product discussion
p1725378345801409/1725375599.111769-slack-C01U2KGS2PQ
Does this pull request change what data or activity we track or use?
No
Testing instructions: