Dominik Schilling (ocean90)
d880e60f11
KSES: Support 'tag' => true as a shorthand for 'tag' => array() in wp_kses_attr().
...
`Automatic_Upgrader_Skin::feedback()` had always assumed that this is already the case, now it is.
See #20017 .
Fixes #40680 .
git-svn-id: https://develop.svn.wordpress.org/trunk@40637 602fd350-edb4-49c9-b593-d223f7449a82
2017-05-11 19:22:17 +00:00
Gary Pendergast
595c76de1a
KSES: Deprecate wp_kses_js_entities().
...
This function was originally introduced to fix an XSS attack in Netscape 4, which never affected any other browsers, or later versions of Netscape.
I'm willing to go out on a limb, and say that we've officially dropped security support for Netscape 4.
Props dmsnell, desrosj.
Fixes #33848 .
git-svn-id: https://develop.svn.wordpress.org/trunk@38785 602fd350-edb4-49c9-b593-d223f7449a82
2016-10-13 22:24:27 +00:00
Aaron Jorbin
4484e2d2c3
Formatting: Allow KSES custom elements with hyphens
...
The W3C Custom Elements spec (http://www.w3.org/TR/custom-elements/#concepts ) allows you to use your own custom DOM elements/tags. One of the main requirements is that the tag name "must contain a U+002D HYPHEN-MINUS character". This adjusts KSES to allow it.
Fixes #34105 .
Props batmoo.
git-svn-id: https://develop.svn.wordpress.org/trunk@38511 602fd350-edb4-49c9-b593-d223f7449a82
2016-09-02 04:16:00 +00:00
Sergey Biryukov
d727e3b516
KSES: Allow the reversed attribute for <ol>.
...
Props lancewillett.
Fixes #35079 .
git-svn-id: https://develop.svn.wordpress.org/trunk@35960 602fd350-edb4-49c9-b593-d223f7449a82
2015-12-16 09:53:18 +00:00
Scott Taylor
16b02b6768
KSES: have you ever heard of the <bdo> HTML tag? Same. http://www.w3schools.com/tags/tag_bdo.asp
...
Adds unit test.
Props iandunn.
Fixes #34063 .
git-svn-id: https://develop.svn.wordpress.org/trunk@35141 602fd350-edb4-49c9-b593-d223f7449a82
2015-10-13 17:17:13 +00:00
Gary Pendergast
7b41adf712
Shortcodes: Improve the reliablity of shortcodes inside HTML tags.
...
Props miqrogroove.
See #15694 .
git-svn-id: https://develop.svn.wordpress.org/trunk@33359 602fd350-edb4-49c9-b593-d223f7449a82
2015-07-22 05:14:50 +00:00
Scott Taylor
a06f5f6d90
Don't strip \0 (backslash+zero) from post content for users without "unfiltered_html"
...
Adds unit tests.
Props miqrogroove.
Fixes #28699 .
git-svn-id: https://develop.svn.wordpress.org/trunk@32860 602fd350-edb4-49c9-b593-d223f7449a82
2015-06-19 18:46:11 +00:00
Sergey Biryukov
99d75b6acb
Make wp_kses_no_null() remove any invalid control characters in a string.
...
props mauteri, miqrogroove.
fixes #28506 .
git-svn-id: https://develop.svn.wordpress.org/trunk@28942 602fd350-edb4-49c9-b593-d223f7449a82
2014-07-01 18:00:50 +00:00
Peter Westwood
be669106d5
Unit Tests: Add the ticket number to the new tests. See #26290
...
git-svn-id: https://develop.svn.wordpress.org/trunk@26431 602fd350-edb4-49c9-b593-d223f7449a82
2013-11-27 14:47:03 +00:00
Peter Westwood
02ab2c69bb
Unit Tests: Add some simple test cases to highlight the types of html entity that kses currently blocks. See #26290
...
git-svn-id: https://develop.svn.wordpress.org/trunk@26430 602fd350-edb4-49c9-b593-d223f7449a82
2013-11-27 14:44:57 +00:00
Andrew Nacin
8045afd81b
Move PHPUnit tests into a tests/phpunit directory.
...
wp-tests-config.php can/should reside in the root of a develop checkout. `phpunit` should be run from the root.
see #25088 .
git-svn-id: https://develop.svn.wordpress.org/trunk@25165 602fd350-edb4-49c9-b593-d223f7449a82
2013-08-29 18:39:34 +00:00
