Changeset 11929 for trunk/wp-includes/default-filters.php

Timestamp:

09/14/2009 01:57:48 PM (15 years ago)

Author:

ryan

Message:

Filter fields through kses upon display. Introduce sanitize_user_object() and sanitize_user_field(). see #10751

File:

• trunk/wp-includes/default-filters.php (modified) (3 diffs)

trunk/wp-includes/default-filters.php

@@ -18 +18 @@
     'pre_user_nickname');
 foreach ( $filters as $filter ) {
-    add_filter($filter, 'strip_tags');
+    add_filter($filter, 'sanitize_text_field');
+    add_filter($filter, 'wp_filter_kses');
+    add_filter($filter, '_wp_specialchars', 30);
+}
+
+// Strip, kses, special chars for string display
+$filters = array('term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname');
+foreach ( $filters as $filter ) {
+    add_filter($filter, 'sanitize_text_field');
+    add_filter($filter, 'wp_filter_kses');
+    add_filter($filter, '_wp_specialchars', 30);
+}
+
+// Kses only for textarea saves and displays
+$filters = array('pre_term_description', 'term_description', 'pre_link_description', 'link_description', 'pre_link_notes', 'link_notes', 'pre_user_description', 'user_description');
+foreach ( $filters as $filter ) {
+    add_filter($filter, 'wp_filter_kses');
+}
+
+// Email saves
+$filters = array('pre_comment_author_email', 'pre_user_email');
+foreach ( $filters as $filter ) {
     add_filter($filter, 'trim');
-    add_filter($filter, 'wp_filter_kses');
-    add_filter($filter, '_wp_specialchars', 30);
-}
-
-// Kses only for textarea saves
-$filters = array('pre_term_description', 'pre_link_description', 'pre_link_notes', 'pre_user_description');
-foreach ( $filters as $filter ) {
-    add_filter($filter, 'wp_filter_kses');
-}
-
-// Email
-$filters = array('pre_comment_author_email', 'pre_user_email');
-foreach ( $filters as $filter ) {
-    add_filter($filter, 'trim');
+    add_filter($filter, 'sanitize_email');
+    add_filter($filter, 'wp_filter_kses');
+}
+
+// Email display
+$filters = array('comment_author_email', 'user_email');
+foreach ( $filters as $filter ) {
     add_filter($filter, 'sanitize_email');
     add_filter($filter, 'wp_filter_kses');
@@ -42 +56 @@
     'pre_link_rss');
 foreach ( $filters as $filter ) {
-    add_filter($filter, 'strip_tags');
-    add_filter($filter, 'trim');
+    add_filter($filter, 'wp_strip_all_tags');
     add_filter($filter, 'esc_url_raw');
     add_filter($filter, 'wp_filter_kses');
@@ -51 +64 @@
 $filters = array('user_url', 'link_url', 'link_image', 'link_rss', 'comment_url');
 foreach ( $filters as $filter ) {
-    add_filter($filter, 'strip_tags');
-    add_filter($filter, 'trim');
+    add_filter($filter, 'wp_strip_all_tags');
     add_filter($filter, 'esc_url');
     add_filter($filter, 'wp_filter_kses');