WordPress-C
/
WordPress
mirror of https://github.com/WordPress/WordPress.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Switch to wp_kses_data() for displayed filtering to avoid slashing. fixes #10949 

git-svn-id: http://svn.automattic.com/wordpress/trunk@12126 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2009-10-29 17:32:23 +00:00
parent 4ec1d4bc32
commit 6ecb855d33
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
wp-includes/default-filters.php
View File

@ -22,7 +22,7 @@ foreach ( array( 'pre_term_name', 'pre_comment_author_name', 'pre_link_name', 'p
// Strip, kses, special chars for string display // Strip, kses, special chars for string display
foreach ( array( 'term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname' ) as $filter ) { foreach ( array( 'term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname' ) as $filter ) {
add_filter( $filter, 'sanitize_text_field' ); add_filter( $filter, 'sanitize_text_field' );
add_filter( $filter, 'wp_filter_kses' ); add_filter( $filter, 'wp_kses_data' );
add_filter( $filter, '_wp_specialchars', 30 ); add_filter( $filter, '_wp_specialchars', 30 );
} }
@ -46,7 +46,7 @@ foreach ( array( 'pre_comment_author_email', 'pre_user_email' ) as $filter ) {
// Email display // Email display
foreach ( array( 'comment_author_email', 'user_email' ) as $filter ) { foreach ( array( 'comment_author_email', 'user_email' ) as $filter ) {
add_filter( $filter, 'sanitize_email' ); add_filter( $filter, 'sanitize_email' );
add_filter( $filter, 'wp_filter_kses' ); add_filter( $filter, 'wp_kses_data' );
} }
// Save URL // Save URL
@ -61,7 +61,7 @@ foreach ( array( 'pre_comment_author_url', 'pre_user_url', 'pre_link_url', 'pre_
foreach ( array( 'user_url', 'link_url', 'link_image', 'link_rss', 'comment_url' ) as $filter ) { foreach ( array( 'user_url', 'link_url', 'link_image', 'link_rss', 'comment_url' ) as $filter ) {
add_filter( $filter, 'wp_strip_all_tags' ); add_filter( $filter, 'wp_strip_all_tags' );
add_filter( $filter, 'esc_url' ); add_filter( $filter, 'esc_url' );
add_filter( $filter, 'wp_filter_kses' ); add_filter( $filter, 'wp_kses_data' );
} }
// Slugs // Slugs