[wp-trac] [WordPress Trac] #11833: bizarre behavior in the comment form sanitization

[WordPress Trac]

#11833: bizarre behavior in the comment form sanitization
-------------------------------+--------------------------------------------
 Reporter:  Denis-de-Bernardy  |       Owner:  ryan 
     Type:  defect (bug)       |      Status:  new  
 Priority:  normal             |   Milestone:  2.9.2
Component:  Security           |     Version:  3.0  
 Severity:  normal             |    Keywords:       
-------------------------------+--------------------------------------------

Comment(by Denis-de-Bernardy):

 see also this wonderful use case:

 http://core.trac.wordpress.org/ticket/11830#comment:4

 {{{
 <
 a
 <a
         href    =
         http://foo:bar@foo.com#?#

 <a
         href    =       http://foo.com?\"'

 >test</a>

 test6

 test5
 }}}

 the stripslashed and filtered result as a visitor:

 {{{
 <
 a
 <a
         href    =
         http://foo:bar@foo.com#?#

 <a>test</a>

 test6

 test5

 <p><<br />
 a<br />
 <a<br />
         href    =<br />
         <a  href="http://foo:bar@foo.com#?#"
 rel="nofollow">http://foo:bar@foo.com#?#</a></p>
 <p><a>test</a></p>
 <p>test6</p>
 <p>test5</p>
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/11833#comment:4>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software