Ticket #2130: kses.php.2.diff

wp-includes/kses.php

@@ -77 +77 @@
 # matches stray ">" characters.
 ###############################################################################
 {
-        return preg_replace('%(<'.# EITHER: <
+        return preg_replace('%(<!--.*-->)|(<'.# EITHER: <
         '[^>]*'.# things that aren't >
         '(>|$)'.# > or end of string
         '|>)%e', # OR: just a >
@@ -98 +98 @@
                 return '&gt;';
         # It matched a ">" character
 
+        if (preg_match('%^<!--.*-->$%', $string))
+                return $string;
+        # Allow HTML comments
+
         if (!preg_match('%^<\s*(/\s*)?([a-zA-Z0-9]+)([^>]*)>?$%', $string, $matches))
                 return '';
         # It's seriously malformed