[wp-trac] [WordPress Trac] #46197: safecss_filter_attr remove styles with calc()

WordPress Trac noreply at wordpress.org
Wed Feb 6 15:48:58 UTC 2019


#46197: safecss_filter_attr remove styles with calc()
--------------------------+-----------------------------
 Reporter:  displaynone   |      Owner:  (none)
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  trunk
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 I have a shortcode inside a tag attribute:

 {{{
 <a style="color:#d0c900; width: calc([myshortcode]% *10*1 );">
 }}}


 Executing `do_shortcode` returns:
 {{{
 <a style="color:#d0c900;">
 }}}

 Debuging `safecss_filter_attr` I found that if the attribute contains a
 parentheses, the method ignores it. So using: `calc( 100% - 20px )` is not
 allowed

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/46197>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list