Changeset 21850 for trunk/wp-includes/formatting.php

Timestamp:

09/14/2012 07:32:53 PM (12 years ago)

Author:

nacin

Message:

Use the non-slashing variants of kses functions in sanitize_option() to avoid slash ping pong. fixes #21892.

File:

• trunk/wp-includes/formatting.php (modified) (2 diffs)

trunk/wp-includes/formatting.php

@@ -2790 +2790 @@
         case 'blogdescription':
         case 'blogname':
-            $value = addslashes($value);
-            $value = wp_filter_post_kses( $value ); // calls stripslashes then addslashes
-            $value = stripslashes($value);
+            $value = wp_kses_post( $value );
             $value = esc_html( $value );
             break;
@@ -2808 +2806 @@
         case 'upload_path':
             $value = strip_tags($value);
-            $value = addslashes($value);
-            $value = wp_filter_kses($value); // calls stripslashes then addslashes
-            $value = stripslashes($value);
+            $value = wp_kses_data($value);
             break;