WordPress.org

Make WordPress Core

Ticket #37208: 37208_strip_tags.diff

File 37208_strip_tags.diff, 491 bytes (added by rachelbaker, 5 years ago)
  • src/wp-includes/comment.php

     
    10571057                return false; // If moderation keys are empty
    10581058
    10591059        // Ensure HTML tags are not being used to bypass the blacklist.
    1060         $comment_without_html = wp_kses( $comment, array() );
     1060        $comment_without_html = wp_strip_all_tags( $comment );
    10611061
    10621062        $words = explode("\n", $mod_keys );