Jake Spurlock 39a8eacb5f Update wp_kses_bad_protocol() to recognize : on uri attributes, ...

`wp_kses_bad_protocol()` makes sure to validate that uri attributes don’t contain invalid/or not allowed protocols. While this works fine in most cases, there’s a risk that by using the colon html5 named entity, one is able to bypass this function.

Props: xknown, nickdaugherty, peterwilsoncc.


git-svn-id: https://develop.svn.wordpress.org/trunk@46895 602fd350-edb4-49c9-b593-d223f7449a82

2019-12-12 17:52:18 +00:00

..

e2e

Block Editor: Update the WordPress Packages to the ones used in the Gutenberg 6.5 release

2019-09-19 15:17:39 +00:00

phpunit

Update wp_kses_bad_protocol() to recognize : on uri attributes,

2019-12-12 17:52:18 +00:00

qunit

REST API: Add tax relation parameter to posts collection.

2019-11-03 23:12:44 +00:00