Better protocol check from Łukasz Pilorz.
git-svn-id: http://svn.automattic.com/wordpress/trunk@7370 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
a4dc527de4
commit
5f6bc326a4
|
@ -832,7 +832,14 @@ function wp_kses_html_error($string) {
|
||||||
function wp_kses_bad_protocol_once($string, $allowed_protocols) {
|
function wp_kses_bad_protocol_once($string, $allowed_protocols) {
|
||||||
global $_kses_allowed_protocols;
|
global $_kses_allowed_protocols;
|
||||||
$_kses_allowed_protocols = $allowed_protocols;
|
$_kses_allowed_protocols = $allowed_protocols;
|
||||||
return preg_replace_callback('/^((&[^;]*;|[\sA-Za-z0-9])*)'.'(:|:|&#[Xx]3[Aa];)\s*/', create_function('$matches', 'global $_kses_allowed_protocols; return wp_kses_bad_protocol_once2($matches[1], $_kses_allowed_protocols);'), $string);
|
|
||||||
|
$string2 = preg_split('/:|:|:/i', $string, 2);
|
||||||
|
if ( isset($string2[1]) && !preg_match('%/\?%', $string2[0]) )
|
||||||
|
$string = wp_kses_bad_protocol_once2($string2[0], $allowed_protocols) . trim($string2[1]);
|
||||||
|
else
|
||||||
|
$string = preg_replace_callback('/^((&[^;]*;|[\sA-Za-z0-9])*)'.'(:|:|&#[Xx]3[Aa];)\s*/', create_function('$matches', 'global $_kses_allowed_protocols; return wp_kses_bad_protocol_once2($matches[1], $_kses_allowed_protocols);'), $string);
|
||||||
|
|
||||||
|
return $string;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|
Loading…
Reference in New Issue