';
+ $output .= '
';
$output .= $this->get_excerpt( $length, $post_id );
$output .= '
';
diff --git a/inc/views/pluggable/pagination.php b/inc/views/pluggable/pagination.php
index a0e95f9cf5..d75bc8d270 100644
--- a/inc/views/pluggable/pagination.php
+++ b/inc/views/pluggable/pagination.php
@@ -55,13 +55,14 @@ public function get_posts( \WP_REST_Request $request ) {
return new \WP_REST_Response( '' );
}
- $query_args = $request->get_body();
- $args = json_decode( $query_args, true );
-
- $per_page = get_option( 'posts_per_page' );
+ $page_number = absint( $request['page_number'] );
+ $query_args = $request->get_body();
+ $args = json_decode( $query_args, true );
+ $per_page = get_option( 'posts_per_page' );
if ( $per_page > 100 ) {
$per_page = 100;
}
+ $args = $this->sanitize_infinite_scroll_query_args( is_array( $args ) ? $args : array() );
/**
* If homepage is set to 'A static page', there will be a parameter inside the query named 'pagename'.
@@ -73,24 +74,17 @@ public function get_posts( \WP_REST_Request $request ) {
}
$args['posts_per_page'] = $per_page;
-
- if ( empty( $args['post_type'] ) ) {
- $args['post_type'] = 'post';
- }
-
- $args['paged'] = $request['page_number'];
- $args['ignore_sticky_posts'] = 1;
- $args['post_status'] = 'publish';
+ $args['paged'] = $page_number;
if ( ! empty( $request['lang'] ) ) {
if ( defined( 'POLYLANG_VERSION' ) ) {
- $args['lang'] = $request['lang'];
+ $args['lang'] = sanitize_text_field( $request['lang'] );
}
if ( defined( 'ICL_SITEPRESS_VERSION' ) ) {
global $sitepress;
if ( gettype( $sitepress ) === 'object' && method_exists( $sitepress, 'switch_lang' ) ) {
- $sitepress->switch_lang( $request['lang'] );
+ $sitepress->switch_lang( sanitize_text_field( $request['lang'] ) );
}
}
}
@@ -302,6 +296,109 @@ public function render_post_navigation() {
echo '