Changeset 21850

Timestamp:

09/14/2012 07:32:53 PM (14 years ago)

Author:

nacin

Message:

Use the non-slashing variants of kses functions in sanitize_option() to avoid slash ping pong. fixes #21892.

File:

• trunk/wp-includes/formatting.php (modified) (2 diffs)

trunk/wp-includes/formatting.php

@@ -2790 +2790 @@
                 case 'blogdescription':
                 case 'blogname':
-                        $value = addslashes($value);
-                        $value = wp_filter_post_kses( $value ); // calls stripslashes then addslashes
-                        $value = stripslashes($value);
+                        $value = wp_kses_post( $value );
                         $value = esc_html( $value );
                         break;
@@ -2808 +2806 @@
                 case 'upload_path':
                         $value = strip_tags($value);
-                        $value = addslashes($value);
-                        $value = wp_filter_kses($value); // calls stripslashes then addslashes
-                        $value = stripslashes($value);
+                        $value = wp_kses_data($value);
                         break;