[wp-trac] [WordPress Trac] #10336: Inline CSS filter for kses
WordPress Trac
wp-trac at lists.automattic.com
Fri Jul 3 11:53:51 UTC 2009
#10336: Inline CSS filter for kses
--------------------------+-------------------------------------------------
Reporter: azaozz | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: Unassigned
Component: Security | Version:
Severity: normal | Keywords:
--------------------------+-------------------------------------------------
There are quite a few nasty CSS "tricks" that are currently possible for
users without the "unfiltered html" capability. Adding the inline CSS
filtering from WPMU with some improvements would close that hole and still
allow most basic styles through.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/10336>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list