[wp-trac] [WordPress Trac] #11833: bizarre behavior in the comment form sanitization
WordPress Trac
wp-trac at lists.automattic.com
Sat Jan 9 02:10:13 UTC 2010
#11833: bizarre behavior in the comment form sanitization
-------------------------------+--------------------------------------------
Reporter: Denis-de-Bernardy | Owner: ryan
Type: defect (bug) | Status: new
Priority: normal | Milestone: 2.9.2
Component: Security | Version: 3.0
Severity: normal | Keywords:
-------------------------------+--------------------------------------------
Comment(by Denis-de-Bernardy):
this is when logged in, btw. as a visitor, I ultimately get:
{{{
<p><a<br />
href = <a href="http://foo.com" rel="nofollow">http://foo.com</a></p>
<p><a href="http://foo.com" rel="nofollow">test</a></p>
<p>test4</p>
}}}
better, but it does suggest there might be bugs in kses.
@miqrogroove: using 3.0 with my theme and a bunch of plugins active, but
nothing that filters anything comments-related.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/11833#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list