Changeset 17614

Timestamp:

04/06/2011 09:28:52 PM (14 years ago)

Author:

nacin

Message:

Make underscores valid in sanitize_html_class. fixes #17067.

File:

• trunk/wp-includes/formatting.php (modified) (2 diffs)

trunk/wp-includes/formatting.php

@@ -877 +877 @@
  * Santizes a html classname to ensure it only contains valid characters
  *
- * Strips the string down to A-Z,a-z,0-9,'-' if this results in an empty
+ * Strips the string down to A-Z,a-z,0-9,_,-. If this results in an empty
  * string then it will return the alternative value supplied.
  *
@@ -891 +891 @@
 function sanitize_html_class( $class, $fallback = '' ) {
     //Strip out any % encoded octets
-    $sanitized = preg_replace('|%[a-fA-F0-9][a-fA-F0-9]|', '', $class);
-
-    //Limit to A-Z,a-z,0-9,'-'
-    $sanitized = preg_replace('/[^A-Za-z0-9-]/', '', $sanitized);
+    $sanitized = preg_replace( '|%[a-fA-F0-9][a-fA-F0-9]|', '', $class );
+
+    //Limit to A-Z,a-z,0-9,_,-
+    $sanitized = preg_replace( '/[^A-Za-z0-9_-]/', '', $sanitized );
 
     if ( '' == $sanitized )