[wp-trac] [WordPress Trac] #43187: Add content filter to make target="_blank" always secure

WordPress Trac noreply at wordpress.org
Thu Feb 1 12:58:02 UTC 2018


#43187: Add content filter to make target="_blank" always secure
-------------------------+-----------------------------
 Reporter:  notnownikki  |       Owner:
     Type:  enhancement  |      Status:  reopened
 Priority:  normal       |   Milestone:  Future Release
Component:  General      |     Version:
 Severity:  normal       |  Resolution:
 Keywords:  has-patch    |     Focuses:
-------------------------+-----------------------------

Comment (by notnownikki):

 Yeah... ok, I'll remove the display filtering from this diff for now.

 Looks like I can set up the filters in `kses_init` instead, and deal with
 the admin/editor roles much more easily:

 {{{
 function kses_init() {
         kses_remove_filters();

         if ( ! current_user_can( 'unfiltered_html' ) ) {
                 kses_init_filters();
         }
         // Phishing filters (for ALL users)
         add_filter ....

 }
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43187#comment:20>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list