Filter blog name and description through kses. Props donncha. fixes #1931
git-svn-id: http://svn.automattic.com/wordpress/trunk@3187 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
parent
f78567d941
commit
5f83a2a756
|
@ -53,6 +53,10 @@ case 'update':
|
|||
if( in_array($option, $nonbools) && ( $value == '0' || $value == '') )
|
||||
$value = 'closed';
|
||||
|
||||
if( $option == 'blogdescription' || $option == 'blogname' )
|
||||
if (current_user_can('unfiltered_html') == false)
|
||||
$value = wp_filter_post_kses( $value );
|
||||
|
||||
if ( update_option($option, $value) )
|
||||
$any_changed++;
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue