[wp-trac] [WordPress Trac] #43187: Add content filter to make target="_blank" always secure
WordPress Trac
noreply at wordpress.org
Thu Feb 1 12:58:02 UTC 2018
#43187: Add content filter to make target="_blank" always secure
-------------------------+-----------------------------
Reporter: notnownikki | Owner:
Type: enhancement | Status: reopened
Priority: normal | Milestone: Future Release
Component: General | Version:
Severity: normal | Resolution:
Keywords: has-patch | Focuses:
-------------------------+-----------------------------
Comment (by notnownikki):
Yeah... ok, I'll remove the display filtering from this diff for now.
Looks like I can set up the filters in `kses_init` instead, and deal with
the admin/editor roles much more easily:
{{{
function kses_init() {
kses_remove_filters();
if ( ! current_user_can( 'unfiltered_html' ) ) {
kses_init_filters();
}
// Phishing filters (for ALL users)
add_filter ....
}
}}}
--
Ticket URL: <https://core.trac.wordpress.org/ticket/43187#comment:20>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list