[wp-trac] [WordPress Trac] #10751: kses filter fields when displaying

WordPress Trac wp-trac at lists.automattic.com
Wed Sep 9 02:35:24 UTC 2009


#10751: kses filter fields when displaying
--------------------------+-------------------------------------------------
 Reporter:  ryan          |       Owner:  ryan     
     Type:  defect (bug)  |      Status:  new      
 Priority:  normal        |   Milestone:  2.9      
Component:  Security      |     Version:           
 Severity:  normal        |    Keywords:  has-patch
--------------------------+-------------------------------------------------

Comment(by azaozz):

 Added wp_strip_all_tags() that removes all parts of the <script> and
 <style> tags and sanitize_text_field() that can check text input both on
 save and retrieve from the db (it can be used in filters instead of 'trim'
 and 'strip_tags').

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/10751#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list