[wp-trac] [WordPress Trac] #58921: wp_kses_allowed_html doesn't allow to add esi:include

WordPress Trac noreply at wordpress.org
Sun Jul 30 22:53:07 UTC 2023


#58921: wp_kses_allowed_html doesn't allow to add esi:include
--------------------------------------+------------------------------
 Reporter:  alekv                     |       Owner:  (none)
     Type:  defect (bug)              |      Status:  new
 Priority:  normal                    |   Milestone:  Awaiting Review
Component:  Formatting                |     Version:  3.5
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:
--------------------------------------+------------------------------

Comment (by peterwilsoncc):

 I don't think it's wise to add the tag to the default list of supported
 elements, as in in [https://github.com/WordPress/wordpress-
 develop/pull/4923 PR#4923], the main reason being that it should only be
 permitted on servers that support the tag.

 However, it may be worth supporting the syntax, as in the follow up pull
 requests, to allow developers to add it to the list of supported tags via
 a plugin making use of the various filters in KSES.

 To that end, the discussion on this ticket can become:

 * continue with no support (close the ticket without a change to the code)
 * support tags containing a colon `:`
 * support the specific prefix `esi:`

 As the linked [https://www.w3.org/TR/esi-lang/ w3 document] is a note
 rather than a specification, it would be good to know how widely supported
 ESI tags are supported?

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58921#comment:11>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list