[wp-trac] [WordPress Trac] #57780: wp_kses: Add filter to css_url_data_types

WordPress Trac noreply at wordpress.org
Mon Mar 20 08:21:37 UTC 2023


#57780: wp_kses: Add filter to css_url_data_types
-------------------------------------------------+-------------------------
 Reporter:  scruffian                            |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  6.3
Component:  General                              |     Version:
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch has-testing-info has-      |     Focuses:
  screenshots gutenberg-merge                    |
-------------------------------------------------+-------------------------

Comment (by SergeyBiryukov):

 Replying to [comment:4 azaozz]:
 > The CSS `filter` seems "safe" at first look.

 FWIW, `filter` was already added to `safecss_filter_attr()` a while ago in
 [52049] / #54336.

 This PR appears to be about specifically using `filter` with a URL:
 {{{
 filter: url( my-file.svg#svg-blur );
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57780#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list