[wp-trac] [WordPress Trac] #12284: I/O Sanity Failures With Invalid HTML Entity References

WordPress Trac wp-trac at lists.automattic.com
Fri Feb 19 09:46:47 UTC 2010


#12284: I/O Sanity Failures With Invalid HTML Entity References
-----------------------------+----------------------------------------------
 Reporter:  miqrogroove      |       Owner:  ryan     
     Type:  defect (bug)     |      Status:  new      
 Priority:  highest omg bbq  |   Milestone:  3.0      
Component:  Security         |     Version:           
 Severity:  blocker          |    Keywords:  has-patch
-----------------------------+----------------------------------------------

Comment(by hakre):

 some additional feedback from my side: save an import into the local
 variable table by using the superglobal {{{return ( ( ! in_array($i,
 $GLOBALS['allowedentitynames']) ) ? "&$i;" : "&$i;" );}}} and remove
 the global command on the first line in wp_kses_named_entities.

 What do you think?

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12284#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list