[wp-trac] [WordPress Trac] #48955: WP 5.3.1 changes cause potential backwards compatibility breakage with kses

[WordPress Trac]

#48955: WP 5.3.1 changes cause potential backwards compatibility breakage with kses
--------------------------+---------------------
 Reporter:  iCaleb        |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  5.3.3
Component:  Security      |     Version:  5.3.1
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |     Focuses:
--------------------------+---------------------

Comment (by RyanNovotny):

 Actually on further review I believe wp_kses basically allowed an array
 and now the regex parse inside the block parser encounters an error which
 exposes the bug/unexpected use of wp_kses with arrays.

 I think you can perhaps just add a "doing it wrong" to wp_kses if an array
 or something besides a string is passed(?).  Right now it seems quite
 cryptic to find the problem since its pointing to something you wouldn't
 expect to be used/wasn't previously (block-parser) in this function

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48955#comment:19>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform