Ticket #8209: 8209.diff

wp-admin/includes/plugin-install.php

@@ -383 +383 @@
         $plugins_allowedtags = array('a' => array('href' => array(), 'title' => array(), 'target' => array()),
                                                                 'abbr' => array('title' => array()), 'acronym' => array('title' => array()),
                                                                 'code' => array(), 'pre' => array(), 'em' => array(), 'strong' => array(),
-                                                                'div' => array(), 'p' => array(), 'ul' => array(), 'ol' => array(), 'li' => array());
+                                                                'div' => array(), 'p' => array(), 'ul' => array(), 'ol' => array(), 'li' => array(),
+                                                                'img' => array('src' => array(), 'class' => array(), 'alt' => array()));
         //Sanitize HTML
         foreach ( (array)$api->sections as $section_name => $content )
                 $api->sections[$section_name] = wp_kses($content, $plugins_allowedtags);