[wp-trac] [WordPress Trac] #64418: Valid CSS is causing failure in the Additional CSS panel

[WordPress Trac]

#64418: Valid CSS is causing failure in the Additional CSS panel
-------------------------------------------------+-------------------------
 Reporter:  drw158                               |       Owner:  jonsurrell
     Type:  defect (bug)                         |      Status:  reopened
 Priority:  normal                               |   Milestone:  7.0
Component:  Customize                            |     Version:  4.7
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch has-unit-tests dev-        |     Focuses:  css
  feedback                                       |
-------------------------------------------------+-------------------------

Comment (by dmsnell):

 > this introduces a security flaw

 Just to follow-up here, I believe this is mistaken. Without diving into
 security issues in this ticket, the reproduction steps are solid, but also
 unaffected by this patch. The steps reproduced the behavior long before
 this patch, and they work in the same way after the patch.

 I was able to reproduce using the steps WordPress 6.5; I did not test
 prior to that. The snippets in the reproduction steps include content that
 doesn’t trigger any of the changed code paths in this ticket either.

 If I have overlooked something, I apologize, though my testing has
 revealed with high confidence that this ticket/patch/changeset //does
 not//, as claimed, introduce this security flaw.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64418#comment:57>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform