[wp-trac] [WordPress Trac] #44724: KSES: Allow 'download' attribute for links
WordPress Trac
noreply at wordpress.org
Fri Dec 14 03:27:59 UTC 2018
#44724: KSES: Allow 'download' attribute for links
------------------------------------------------+------------------------
Reporter: SergeyBiryukov | Owner: chriscct7
Type: enhancement | Status: closed
Priority: normal | Milestone: 5.0
Component: Formatting | Version:
Severity: normal | Resolution: fixed
Keywords: has-patch has-unit-tests fixed-5.0 | Focuses:
------------------------------------------------+------------------------
Changes (by pento):
* status: accepted => closed
* resolution: => fixed
Comment:
In [changeset:"44156" 44156]:
{{{
#!CommitTicketReference repository="" revision="44156"
KSES: Allow the `download` attribute on `<a>` tags.
To avoid this being a vector for bypassing the filetypes that are allowed
to be uploaded, this attribute is only allowed to be added without a
value.
Merges [43813] from the 5.0 branch to trunk.
Props kalpshit, arshidkv12, welcher, peterwilsoncc, marina_wp, pento.
Fixes #44724.
}}}
--
Ticket URL: <https://core.trac.wordpress.org/ticket/44724#comment:15>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list