Ticket #19354: 19354.2.patch

wp-includes/functions.php

@@ -4666 +4666 @@
         static $protocols;
 
         if ( empty( $protocols ) ) {
-                $protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn' );
+                $protocols = array( 'http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet', 'mms', 'rtsp', 'svn', 'data' );
                 $protocols = apply_filters( 'kses_allowed_protocols', $protocols );
         }
 

wp-includes/kses.php

@@ -1352 +1352 @@
  * @since 2.0.0
  */
 function kses_init() {
+        
+        $backtrack_limit = ini_get('pcre.backtrack_limit');
+        if ( false === $backtrack_limit || $backtrack_limit  < 1000000 )
+                ini_set( 'pcre.backtrack_limit', 1000000 );
+
         kses_remove_filters();
 
         if (current_user_can('unfiltered_html') == false)