[wp-trac] [WordPress Trac] #17400: Disable JavaScript in Comments

WordPress Trac wp-trac at lists.automattic.com
Sat May 21 19:46:48 UTC 2011


#17400: Disable JavaScript in Comments
--------------------------+----------------------
 Reporter:  Kuzmanov      |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Comments      |     Version:  3.2
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |
--------------------------+----------------------
Changes (by ocean90):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 To disallow unfiltered HTML for all users, you can add this to wp-
 config.php:


 {{{
 define( 'DISALLOW_UNFILTERED_HTML', true );
 }}}

 From [http://wpdevel.wordpress.com/2010/12/31/the-published-exploit-for-
 wordpress-3-0-4-isnt-accurate/ wpdevel post by Nacin].

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/17400#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list