WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Security: Correct the inline docs for the `wp_kses_allowed_html` filter. 

Props peterwilsoncc

Fixes #53597

Built from https://develop.svn.wordpress.org/trunk@51675


git-svn-id: http://core.svn.wordpress.org/trunk@51281 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
John Blackbourn 2021-08-26 19:28:57 +00:00
parent 9bc8352b00
commit 52d6bd3529
2 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
wp-includes/kses.php
View File

@ -846,22 +846,26 @@ function wp_kses_one_attr( $string, $element ) {
* *
* @param string|array $context The context for which to retrieve tags. Allowed values are 'post', * @param string|array $context The context for which to retrieve tags. Allowed values are 'post',
* 'strip', 'data', 'entities', or the name of a field filter such as * 'strip', 'data', 'entities', or the name of a field filter such as
* 'pre_user_description'. * 'pre_user_description', or an array of allowed HTML elements and attributes.
* @return array Array of allowed HTML tags and their allowed attributes. * @return array Array of allowed HTML tags and their allowed attributes.
*/ */
function wp_kses_allowed_html( $context = '' ) { function wp_kses_allowed_html( $context = '' ) {
global $allowedposttags, $allowedtags, $allowedentitynames; global $allowedposttags, $allowedtags, $allowedentitynames;
if ( is_array( $context ) ) { if ( is_array( $context ) ) {
// When `$context` is an array it's actually an array of allowed HTML elements and attributes.
$html = $context;
$context = 'explicit';
/** /**
* Filters the HTML tags that are allowed for a given context. * Filters the HTML tags that are allowed for a given context.
* *
* @since 3.5.0 * @since 3.5.0
* *
* @param array[]|string $context Context to judge allowed tags by. * @param array[] $html Allowed HTML tags.
* @param string $context_type Context name. * @param string $context Context name.
*/ */
return apply_filters( 'wp_kses_allowed_html', $context, 'explicit' ); return apply_filters( 'wp_kses_allowed_html', $html, $context );
} }
switch ( $context ) { switch ( $context ) {

2
wp-includes/version.php
View File

@ -13,7 +13,7 @@
* *
* @global string $wp_version * @global string $wp_version
*/ */
$wp_version = '5.9-alpha-51674'; $wp_version = '5.9-alpha-51675';
/** /**
* Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema. * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.