Ticket #33259: 33259.2.diff

src/wp-includes/shortcodes.php

@@ -394 +394 @@
                                 if ( $count > 0 ) {
                                         // Sanitize the shortcode output using KSES.
                                         $new_attr = wp_kses_one_attr( $new_attr, $elname );
-                                        if ( '' !== $new_attr ) {
+                                        if ( '' !== trim( $new_attr ) ) {
                                                 // The shortcode is safe to use now.
                                                 $attr = $new_attr;
                                         }

tests/phpunit/tests/shortcode.php

@@ -419 +419 @@
                                 '<!--[if lt IE 7]>',
                         ),
                         array(
+                                '1 <a href="[test-shortcode-tag]"> 2 <a href="[test-shortcode-tag]" >',
+                                '1 <a href=""> 2 <a href="" >',
+                        ),
+                        array(
+                                '1 <a noise="[test-shortcode-tag]"> 2 <a noise=" [test-shortcode-tag] " >',
+                                '1 <a noise="[test-shortcode-tag]"> 2 <a noise=" [test-shortcode-tag] " >',
+                        ),
+                        array(
                                 '[gallery title="<div>hello</div>"]',
                                 '',
                         ),