Ticket #2130: kses.php.diff

wp-includes/kses.php

@@ -98 +98 @@
                 return '>';
         # It matched a ">" character
 
+        if (preg_match('%^<!--[^>-]+-->$%', $string))
+                return $string;
+        # Allow HTML comments
+
         if (!preg_match('%^<\s*(/\s*)?([a-zA-Z0-9]+)([^>]*)>?$%', $string, $matches))
                 return '';
         # It's seriously malformed