[wp-trac] Re: [WordPress Trac] #4720: Users without unfiltered_html capability can post arbitrary html

[WordPress Trac]

#4720: Users without unfiltered_html capability can post arbitrary html
-----------------------+----------------------------------------------------
 Reporter:  xknown     |        Owner:  anonymous
     Type:  defect     |       Status:  reopened 
 Priority:  high       |    Milestone:  2.2.3    
Component:  Security   |      Version:  2.2.2    
 Severity:  major      |   Resolution:           
 Keywords:  has-patch  |  
-----------------------+----------------------------------------------------
Comment (by Otto42):

 Question to xknown (original submitter): Have you actually done this and
 made it work? Can you provide exact reproduction details? Or is this a
 purely theoretical thing you found while looking through the code?

 Because I just tried it with a local install of 2.2.2 and was unable to
 reproduce it.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4720#comment:11>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software