[wp-trac] [WordPress Trac] #46197: safecss_filter_attr remove styles with calc()
WordPress Trac
noreply at wordpress.org
Wed Feb 6 16:17:37 UTC 2019
#46197: safecss_filter_attr remove styles with calc()
--------------------------+------------------------------
Reporter: displaynone | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: General | Version: trunk
Severity: normal | Resolution:
Keywords: | Focuses:
--------------------------+------------------------------
Comment (by joyously):
There are quite a few valid things that would get removed. Gradients and
filters and `var` can also have parentheses, not to mention data URIs or
`content` values.
But what is odd is that the $allowed_attr is filtered, and if empty, no
other change is made to the $css. Only if it has something is the $css
further manipulated. This seems backward.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/46197#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list