[wp-trac] [WordPress Trac] #44044: $allowed_tags and $allowed_protocols in wp_privacy_generate_personal_data_export_group_html not filterable.
WordPress Trac
noreply at wordpress.org
Tue Jul 17 04:08:12 UTC 2018
#44044: $allowed_tags and $allowed_protocols in
wp_privacy_generate_personal_data_export_group_html not filterable.
---------------------------------------------------+---------------------
Reporter: TZ Media | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone: 4.9.8
Component: Privacy | Version: 4.9.6
Severity: normal | Resolution:
Keywords: has-patch needs-testing needs-refresh | Focuses:
---------------------------------------------------+---------------------
Changes (by pento):
* keywords: has-patch needs-testing 2nd-opinion => has-patch needs-testing
needs-refresh
Comment:
[attachment:"44044.diff"] is a good approach. It can be simplified
further, though. Remove the `$allowed_tags` and `$allowed_protocols`
variables entirely, and change the `wp_kses()` call to be `wp_kses(
$value, 'personal_data_export' )`. KSES will take care populating the
actual HTML and protocol arrays.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/44044#comment:16>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list