From 10c123044c9fdc6815d089a64832284f8fbbb162 Mon Sep 17 00:00:00 2001 From: audrasjb Date: Mon, 24 Jun 2024 14:57:13 +0000 Subject: [PATCH] HTML API: Code improvements following [58472]. Props xknown, jorbin. Unprops audrasjb. Built from https://develop.svn.wordpress.org/trunk@58473 git-svn-id: http://core.svn.wordpress.org/trunk@57922 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/html-api/class-wp-html-tag-processor.php | 4 ++-- wp-includes/version.php | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/wp-includes/html-api/class-wp-html-tag-processor.php b/wp-includes/html-api/class-wp-html-tag-processor.php index ec9e2c4391..4ed0c28136 100644 --- a/wp-includes/html-api/class-wp-html-tag-processor.php +++ b/wp-includes/html-api/class-wp-html-tag-processor.php @@ -2980,8 +2980,8 @@ class WP_HTML_Tag_Processor { * * @see https://html.spec.whatwg.org/#attributes-3 */ - $escaped_new_value = esc_attr( $value ); - $updated_attribute = wp_kses_one_attr( "{$comparable_name}=\"{$escaped_new_value}\"", $tag_name ); + $escaped_new_value = in_array( $comparable_name, wp_kses_uri_attributes() ) ? esc_url( $value ) : esc_attr( $value ); + $updated_attribute = "{$name}=\"{$escaped_new_value}\""; } /* diff --git a/wp-includes/version.php b/wp-includes/version.php index 46455a91d6..0708c3ded4 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -16,7 +16,7 @@ * * @global string $wp_version */ -$wp_version = '6.6-beta3-58472'; +$wp_version = '6.6-beta3-58473'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.