Networks and Sites: Improve search term handling in wp_ajax_autocomplete_user() - #11530

Closed

rajeshcpr wants to merge 13 commits into

WordPress:trunkfrom

rajeshcpr:rajeshcpr-patch-2

Commits on Apr 9, 2026

$_REQUEST['term'] used unsanitized in user search query
rajeshcpr
authored
5eed1c8

Commits on Aug 1, 2026

Merge branch 'trunk' into rajeshcpr-patch-2
t-hamano
authored
e20067c
Tests: Add unit tests for wp_ajax_autocomplete_user().

t-hamano
and
claude
committed
2302623

Commits on Aug 4, 2026

Merge branch 'trunk' into rajeshcpr-patch-2
t-hamano
authored
f85ade1
Merge branch 'trunk' into rajeshcpr-patch-2
westonruter
authored
b0a4380

Commits on Aug 5, 2026

Short-circuit empty searches and non-string terms
westonruter
committed
88870e8
Address PHPStan issues in tests
westonruter
committed
293fba9
Ensure GET input var is slashed and add test for apostrophe-containing email
westonruter
committed
3ce6250
Document behavior change with @since 7.1.0 tag on wp_ajax_autocomplete_user()

westonruter
and
claude
committed
ff20bc1
Trim asterisks from search term to prevent matching all users

westonruter
and
claude
committed
784357a
Add missing never return
westonruter
committed
23625b1
Add tests for empty and non-string search terms

westonruter
and
claude
committed
ca51b56
Cover tag-stripping when tags wrap the search term

committed
3d5285f