Ticket #4409: 4409.diff

wp-includes/kses.php

@@ -257 +257 @@
 # matches stray ">" characters.
 ###############################################################################
 {
-        return preg_replace('%((<!--.*?(-->|$))|(<[^>]*(>|$)|>))%e',
+        return preg_replace('%((<!--.*?(-->|$))|(<[^<>]*(>|$)|>))%e',
         "wp_kses_split2('\\1', \$allowed_html, ".'$allowed_protocols)', $string);
 } # function wp_kses_split
 
@@ -289 +289 @@
                 return '';
         # It's seriously malformed
 
+//      Turns 'foo < br' into 'foo &lt; br';
+//      if ( false === strpos($string, '>') )
+//              return str_replace( '<', '&lt;', $string );
+
         $slash = trim($matches[1]);
         $elem = $matches[2];
         $attrlist = $matches[3];
 
-        if (!@isset($allowed_html[strtolower($elem)]))
+        if (!@isset($allowed_html[strtolower($elem)])) {
+                // Turns 'foo < br' into 'foo <br>' like kses did originally
+                if ( false === strpos($string, '>') )
+                        return str_replace( '<', '&lt;', $string );
                 return '';
+        }
         # They are using a not allowed HTML element
 
         if ($slash != '')