Changeset 15559 for trunk/wp-includes/default-filters.php

Timestamp:

09/02/2010 03:06:07 PM (14 years ago)

Author:

ryan

Message:

Do not run kses on display filters for front page views. see #14758

File:

• trunk/wp-includes/default-filters.php (modified) (4 diffs)

trunk/wp-includes/default-filters.php

@@ -22 +22 @@
 // Strip, kses, special chars for string display
 foreach ( array( 'term_name', 'comment_author_name', 'link_name', 'link_target', 'link_rel', 'user_display_name', 'user_first_name', 'user_last_name', 'user_nickname' ) as $filter ) {
-    add_filter( $filter, 'sanitize_text_field'  );
-    add_filter( $filter, 'wp_kses_data'       );
+    if ( is_admin() ) {
+        // These are expensive. Run only on admin pages for defense in depth.
+        add_filter( $filter, 'sanitize_text_field'  );
+        add_filter( $filter, 'wp_kses_data'       );
+    }
     add_filter( $filter, '_wp_specialchars', 30 );
 }
@@ -32 +35 @@
 }
 
-// Kses only for textarea saves displays
-foreach ( array( 'term_description', 'link_description', 'link_notes', 'user_description' ) as $filter ) {
-    add_filter( $filter, 'wp_kses_data' );
+// Kses only for textarea admin displays
+if ( is_admin() ) {
+    foreach ( array( 'term_description', 'link_description', 'link_notes', 'user_description' ) as $filter ) {
+        add_filter( $filter, 'wp_kses_data' );
+    }
 }
 
@@ -44 +49 @@
 }
 
-// Email display
+// Email admin display
 foreach ( array( 'comment_author_email', 'user_email' ) as $filter ) {
     add_filter( $filter, 'sanitize_email' );
-    add_filter( $filter, 'wp_kses_data' );
+    if ( is_admin() )
+        add_filter( $filter, 'wp_kses_data' );
 }
 
@@ -60 +66 @@
 // Display URL
 foreach ( array( 'user_url', 'link_url', 'link_image', 'link_rss', 'comment_url' ) as $filter ) {
-    add_filter( $filter, 'wp_strip_all_tags' );
+    if ( is_admin() )
+        add_filter( $filter, 'wp_strip_all_tags' );
     add_filter( $filter, 'esc_url'           );
-    add_filter( $filter, 'wp_kses_data'    );
+    if ( is_admin() )
+        add_filter( $filter, 'wp_kses_data'    );
 }