Changeset 23317

Timestamp:

01/22/2013 03:37:36 PM (14 years ago)

Author:

nacin

Message:

Verify tags used in the gallery shortcode.

File:

• branches/3.5/wp-includes/media.php (modified) (1 diff)

branches/3.5/wp-includes/media.php

@@ -736 +736 @@
         $itemtag = tag_escape($itemtag);
         $captiontag = tag_escape($captiontag);
+        $icontag = tag_escape($icontag);
+        $valid_tags = wp_kses_allowed_html( 'post' );
+        if ( ! isset( $valid_tags[ $itemtag ] ) )
+                $itemtag = 'dl';
+        if ( ! isset( $valid_tags[ $captiontag ] ) )
+                $captiontag = 'dd';
+        if ( ! isset( $valid_tags[ $icontag ] ) )
+                $icontag = 'dt';
+
         $columns = intval($columns);
         $itemwidth = $columns > 0 ? floor(100/$columns) : 100;