[wp-trac] [WordPress Trac] #19414: Filter 'kses_allowed_protocols' is only applied once in function wp_allowed_protocols() & function esc_url() returns empty string;
WordPress Trac
wp-trac at lists.automattic.com
Fri Dec 2 20:00:05 UTC 2011
#19414: Filter 'kses_allowed_protocols' is only applied once in function
wp_allowed_protocols() & function esc_url() returns empty string;
--------------------------+------------------------------
Reporter: Anatta | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Security | Version: 3.3
Severity: major | Resolution:
Keywords: close |
--------------------------+------------------------------
Comment (by nacin):
It's helpful to report problems rather than solutions. esc_url() is a fix,
sure, but there's a better way to solve your problem: There's a 'meta'
argument for add_node() that allows for an 'onclick' argument. Example:
{{{
$wp_admin_bar->add_node( array(
'id' => 'some-id',
'title' => 'some-title',
'parent' => 'some-parent',
'meta' => array( 'onclick' => 'return;' ),
) );
}}}
--
Ticket URL: <http://core.trac.wordpress.org/ticket/19414#comment:6>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list