[wp-trac] [WordPress Trac] #37208: Comment blacklist can be bypassed with HTML

[WordPress Trac]

#37208: Comment blacklist can be bypassed with HTML
---------------------------------------------+--------------------------
 Reporter:  cfinke                           |       Owner:  rachelbaker
     Type:  defect (bug)                     |      Status:  closed
 Priority:  normal                           |   Milestone:  4.6
Component:  Comments                         |     Version:  1.5
 Severity:  normal                           |  Resolution:  fixed
 Keywords:  has-patch has-unit-tests commit  |     Focuses:
---------------------------------------------+--------------------------

Comment (by rachelbaker):

 In [changeset:"38048"]:
 {{{
 #!CommitTicketReference repository="" revision="38048"
 Comments: Include comment_content with html and without in blacklist_keys
 comparison.

 After [38047], also include the comment_content with html in the
 preg_match against blacklist keys to match urls.

 Props ocean90.
 Fixes #37208.
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37208#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform