[wp-trac] [WordPress Trac] #37204: wp_strip_all_tags() function does not strip all tags

WordPress Trac noreply at wordpress.org
Thu Jul 14 08:20:23 UTC 2016


#37204: wp_strip_all_tags() function does not strip all tags
-----------------------------+----------------------
 Reporter:  aldemarcalazans  |       Owner:
     Type:  defect (bug)     |      Status:  closed
 Priority:  normal           |   Milestone:
Component:  Security         |     Version:  4.4.3
 Severity:  normal           |  Resolution:  invalid
 Keywords:                   |     Focuses:
-----------------------------+----------------------
Changes (by dd32):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 I'd say this works as intended.

 `mytag>` is not a valid HTML tag, and shouldn't be stripped, just as `5>4`
 shouldn't be stripped or modified.

 `wp_strip_all_tags()` is designed to compliment PHP's `strip_tags()`
 functionality, but also strip the contents of `<script>` and `<style>`
 tags.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37204#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list