Changeset 28942 for trunk/src/wp-includes/kses.php

Timestamp:

07/01/2014 06:00:50 PM (10 years ago)

Author:

SergeyBiryukov

Message:

Make wp_kses_no_null() remove any invalid control characters in a string.

props mauteri, miqrogroove.
fixes #28506.

File:

• trunk/src/wp-includes/kses.php (modified) (2 diffs)

trunk/src/wp-includes/kses.php

@@ -992 +992 @@
 
 /**
- * Removes any null characters in $string.
+ * Removes any invalid control characters in $string.
+ *
+ * Also removes any instance of the '\0' string.
  *
  * @since 1.0.0
@@ -1000 +1002 @@
  */
 function wp_kses_no_null($string) {
-    $string = preg_replace('/\0+/', '', $string);
+    $string = preg_replace('/[\x00-\x08\x0B\x0C\x0E-\x1F]/', '', $string);
     $string = preg_replace('/(\\\\0)+/', '', $string);