[wp-trac] Re: [WordPress Trac] #4720: Users without unfiltered_html capability can post arbitrary html

[WordPress Trac]

#4720: Users without unfiltered_html capability can post arbitrary html
----------------------+-----------------------------------------------------
 Reporter:  xknown    |        Owner:  anonymous
     Type:  defect    |       Status:  new      
 Priority:  normal    |    Milestone:           
Component:  Security  |      Version:  2.2.2    
 Severity:  normal    |   Resolution:           
 Keywords:            |  
----------------------+-----------------------------------------------------
Comment (by westi):

 Replying to [comment:2 JeremyVisser]:
 > I can't reproduce on WP 2.2.2. Can you provide exact steps to reproduce
 this? Are you sure this happens on a fresh installation of WordPress?
 Perhaps a plugin is causing this?
 >
 > Trunk is definitely not vulnerable, as grepping the source tree doesn't
 return anything for a search of 'no_filter'.

 Trunk is vulnerable - search for $no_filter for more info.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4720#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software