[wp-trac] [WordPress Trac] #45067: Add CSS URL sanitization to kses.

WordPress Trac noreply at wordpress.org
Tue Oct 16 01:01:46 UTC 2018


#45067: Add CSS URL sanitization to kses.
--------------------------------------+---------------------
 Reporter:  peterwilsoncc             |       Owner:  (none)
     Type:  enhancement               |      Status:  new
 Priority:  normal                    |   Milestone:  5.0
Component:  Editor                    |     Version:
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:
--------------------------------------+---------------------
Changes (by peterwilsoncc):

 * keywords:  has-patch has-unit-tests commit => has-patch has-unit-tests


Comment:

 Hitting a problem in the shortcode validation tests as a result of this:



 {{{
 1) Tests_Shortcode::test_escaping with data set #8 ('<div
 style="background:url([[...y]])">', '<div
 style="background:url([[...y]])">')
 Failed asserting that two strings are equal.
 --- Expected
 +++ Actual
 @@ @@
 -'<div style="background:url([[gallery]])">'
 +'<div style="background:url([gallery])">'


 tests/phpunit/tests/shortcode.php:457
 }}}


 `[[gallery]]` is a valid relative URL, I'll step over the code to see
 where the outer brackets are stripped.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/45067#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list