[wp-trac] [WordPress Trac] #19414: Filter 'kses_allowed_protocols' is only applied once in function wp_allowed_protocols() & function esc_url() returns empty string;

WordPress Trac wp-trac at lists.automattic.com
Fri Dec 2 20:00:05 UTC 2011


#19414: Filter 'kses_allowed_protocols' is only applied once in function
wp_allowed_protocols()  & function esc_url() returns empty string;
--------------------------+------------------------------
 Reporter:  Anatta        |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Security      |     Version:  3.3
 Severity:  major         |  Resolution:
 Keywords:  close         |
--------------------------+------------------------------

Comment (by nacin):

 It's helpful to report problems rather than solutions. esc_url() is a fix,
 sure, but there's a better way to solve your problem: There's a 'meta'
 argument for add_node() that allows for an 'onclick' argument. Example:

 {{{
 $wp_admin_bar->add_node( array(
    'id' => 'some-id',
    'title' => 'some-title',
    'parent' => 'some-parent',
    'meta' => array( 'onclick' => 'return;' ),
 ) );
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/19414#comment:6>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list