diff --git a/wp-includes/theme.php b/wp-includes/theme.php index 6c966f804..88d6cfaef 100644 --- a/wp-includes/theme.php +++ b/wp-includes/theme.php @@ -1149,8 +1149,8 @@ function preview_theme() { // Admin Thickbox requests if ( isset( $_GET['preview_iframe'] ) ) - show_admin_bar( false ); - + show_admin_bar( false ); + $_GET['template'] = preg_replace('|[^a-z0-9_./-]|i', '', $_GET['template']); if ( validate_file($_GET['template']) ) @@ -1164,7 +1164,7 @@ function preview_theme() { return; add_filter( 'stylesheet', '_preview_theme_stylesheet_filter' ); } - + // Prevent theme mods to current theme being used on theme being previewed add_filter( 'pre_option_mods_' . get_current_theme(), '__return_empty_array' );