Ticket #28506: 28506.diff

wp-includes/kses.php

@@ -997 +997 @@
 function wp_kses_no_null($string) {
         $string = preg_replace('/\0+/', '', $string);
         $string = preg_replace('/(\\\\0)+/', '', $string);
+        $string = preg_replace('/[\x00-\x09\x0B\x0C\x0E-\x1F\x7F]/', '', $string);
 
         return $string;
 }