[wp-trac] [WordPress Trac] #29998: kses.php fails to sanitize Outlook HTML content correctly

WordPress Trac noreply at wordpress.org
Thu Oct 16 06:24:13 UTC 2014


#29998: kses.php fails to sanitize Outlook HTML content correctly
--------------------------+-----------------------------
 Reporter:  hmoore71      |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  4.0
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Wordpress 4.0
 attempt to post the contents of an email from Outlook with embedded
 image(s). The post will have artifacts showing of the MS HTML that is
 tossed into Outlook's email.

 If I comment out //add_filter('content_save_pre', 'wp_filter_post_kses');
 in kses.php
 everything is fine.

 If I do the wp_insert_post in admin I suspect kses.php is not loaded as
 the issue does not occur.

 MS HTML has a lot of conditional HTML which is throwing kses.php off.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29998>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list