[wp-trac] [WordPress Trac] #11833: bizarre behavior in the comment form sanitization

WordPress Trac wp-trac at lists.automattic.com
Sat Jan 9 02:10:13 UTC 2010


#11833: bizarre behavior in the comment form sanitization
-------------------------------+--------------------------------------------
 Reporter:  Denis-de-Bernardy  |       Owner:  ryan 
     Type:  defect (bug)       |      Status:  new  
 Priority:  normal             |   Milestone:  2.9.2
Component:  Security           |     Version:  3.0  
 Severity:  normal             |    Keywords:       
-------------------------------+--------------------------------------------

Comment(by Denis-de-Bernardy):

 this is when logged in, btw. as a visitor, I ultimately get:

 {{{
 <p>&lt;a<br />
 href = <a  href="http://foo.com" rel="nofollow">http://foo.com</a></p>
 <p><a  href="http://foo.com" rel="nofollow">test</a></p>
 <p>test4</p>
 }}}

 better, but it does suggest there might be bugs in kses.

 @miqrogroove: using 3.0 with my theme and a bunch of plugins active, but
 nothing that filters anything comments-related.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11833#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list