Ticket #6642: bug6642.patch

kses.php

@@ -429 +429 @@
                         $string = $newstring;
                 if ( $string == '' )
                         return '';
+                // prevent multiple dashes in comments
+                $string = preg_replace('/--+/', '-', $string);
+                // prevent three dashes closing a comment
+                $string = preg_replace('/-$/', '', $string);
                 return "<!--{$string}-->";
         }
         # Allow HTML comments