Changeset 12126

Timestamp:

10/29/2009 05:32:23 PM (15 years ago)

Author:

ryan

Message:

Switch to wp_kses_data() for displayed filtering to avoid slashing. fixes #10949

File:

• trunk/wp-includes/default-filters.php (modified) (3 diffs)

trunk/wp-includes/default-filters.php

@@ -23 +23 @@
 foreach ( array( 'term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname' ) as $filter ) {
     add_filter( $filter, 'sanitize_text_field'  );
-    add_filter( $filter, 'wp_filter_kses'       );
+    add_filter( $filter, 'wp_kses_data'       );
     add_filter( $filter, '_wp_specialchars', 30 );
 }
@@ -47 +47 @@
 foreach ( array( 'comment_author_email', 'user_email' ) as $filter ) {
     add_filter( $filter, 'sanitize_email' );
-    add_filter( $filter, 'wp_filter_kses' );
+    add_filter( $filter, 'wp_kses_data' );
 }
 
@@ -62 +62 @@
     add_filter( $filter, 'wp_strip_all_tags' );
     add_filter( $filter, 'esc_url'           );
-    add_filter( $filter, 'wp_filter_kses'    );
+    add_filter( $filter, 'wp_kses_data'    );
 }