[wp-trac] Re: [WordPress Trac] #4409: KSES removes text after a non-tag less than sign

WordPress Trac wp-trac at lists.automattic.com
Tue Jun 5 19:46:29 GMT 2007


#4409: KSES removes text after a non-tag less than sign
----------------------+-----------------------------------------------------
 Reporter:  mdawaffe  |        Owner:  anonymous  
     Type:  defect    |       Status:  new        
 Priority:  normal    |    Milestone:  2.3 (trunk)
Component:  General   |      Version:  2.2        
 Severity:  normal    |   Resolution:             
 Keywords:            |  
----------------------+-----------------------------------------------------
Comment (by mdawaffe):

 4409.diff: a possible solution.

  1. Tweaks a kses regex.
  2. Converts
 {{{
 This is a < less than sign.
 }}}
  to
 {{{
 This is a &lt; less than sign.
 }}}
  3. Converts
 {{{
 foo > br
 }}}
  to
 {{{
 foo <br>
 }}}
  (and similar for any allowed tag).  This is KSES' original behavior.

 This will need some serious testing to ensure it doesn't open any security
 holes.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4409#comment:1>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list