[wp-trac] [WordPress Trac] #28699: \0 (backslash+zero) gets stripped from post content for users without "unfiltered_html"

WordPress Trac noreply at wordpress.org
Tue Jul 1 23:32:14 UTC 2014


#28699: \0 (backslash+zero) gets stripped from post content for users without
"unfiltered_html"
----------------------------+------------------
 Reporter:  azaozz          |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  4.0
Component:  Formatting      |     Version:  1.0
 Severity:  normal          |  Resolution:
 Keywords:  kses has-patch  |     Focuses:
----------------------------+------------------
Changes (by miqrogroove):

 * keywords:  needs-patch needs-unit-tests kses => kses has-patch


Comment:

 In miqro-28699.3.patch:
 * Do not strip {{{\0}}} from user's CDATA.
 * Do not strip {{{\0}}} from most attributes.
 * Do strip {{{\0}}} in STYLE attributes.
 * {{{\0}}} and {{{\\00}}} are now identical and removed greedily.
 * STYLE and SCRIPT elements unaffected; kses removes them by default.
 * Add unit tests.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28699#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list