[wp-trac] [WordPress Trac] #43187: Add content filter to make target="_blank" always secure

WordPress Trac noreply at wordpress.org
Thu Feb 1 12:46:48 UTC 2018


#43187: Add content filter to make target="_blank" always secure
-------------------------+-----------------------------
 Reporter:  notnownikki  |       Owner:
     Type:  enhancement  |      Status:  reopened
 Priority:  normal       |   Milestone:  Future Release
Component:  General      |     Version:
 Severity:  normal       |  Resolution:
 Keywords:  has-patch    |     Focuses:
-------------------------+-----------------------------
Changes (by iseulde):

 * keywords:  has-patch needs-unit-tests => has-patch


Comment:

 Another thing you could do is move the `current_user_can(
 'unfiltered_html' )` check inside the filters, which also eliminates the
 need for


 {{{
 add_action( 'init', 'kses_init' );
 add_action( 'set_current_user', 'kses_init' );
 }}}

 Which is kind of strange IMHO.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43187#comment:18>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list