[wp-trac] Re: [WordPress Trac] #6642: kses should not allow multiple hyphens in comments

[WordPress Trac]

#6642: kses should not allow multiple hyphens in comments
-------------------------+--------------------------------------------------
 Reporter:  schiller     |        Owner:  anonymous 
     Type:  defect       |       Status:  closed    
 Priority:  normal       |    Milestone:            
Component:  General      |      Version:            
 Severity:  normal       |   Resolution:  worksforme
 Keywords:  xhtml, kses  |  
-------------------------+--------------------------------------------------
Comment (by schiller):

 Actually I had already confirmed this was indeed a problem - someone was
 logged out and made the following comment on my WP 2.3.3 blog:

 Comment: <!-- foo -- bar -->

 And it resulted in a Yellow Page of Death when rendered as XHTML.  That's
 why I dug through and came up with this 2-line patch for kses.

 Note that the comment stays hidden i.e. it actually stays a HTML comment
 it doesn't get escaped to be

 Comment: &lt;!-- foo -- bar --&gt;

 I do not have the "WordPress should correct invalidly nested XHTML
 automatically" checkbox checked (Options > Writing).  Can you describe the
 settings on your blog that relate to translating markup?

-- 
Ticket URL: <http://trac.wordpress.org/ticket/6642#comment:6>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software