Changeset 30720

Timestamp:

12/03/2014 08:46:31 AM (11 years ago)

Author:

DrewAPicture

Message:

Backtick-escape three sets of HTML entities used in DocBlock descriptions in wp-includes/kses.php.

Without the escaping, the Code Reference/browser may inadvertently attempt to convert and display entities.

Fixes #30473.

File:

• trunk/src/wp-includes/kses.php (modified) (3 diffs)

trunk/src/wp-includes/kses.php

@@ -1173 +1173 @@
  * Converts and fixes HTML entities.
  *
- * This function normalizes HTML entities. It will convert "AT&T" to the correct
- * "AT&T", ":" to ":", "&#XYZZY;" to "&#XYZZY;" and so on.
+ * This function normalizes HTML entities. It will convert `AT&T` to the correct
+ * `AT&T", ":" to ":", "&#XYZZY;" to "&#XYZZY;` and so on.
  *
  * @since 1.0.0
@@ -1219 +1219 @@
  * Callback for wp_kses_normalize_entities() regular expression.
  *
- * This function helps wp_kses_normalize_entities() to only accept 16-bit values
- * and nothing more for &#number; entities.
+ * This function helps {@see wp_kses_normalize_entities()} to only accept 16-bit
+ * values and nothing more for `&#number;` entities.
  *
  * @access private
@@ -1278 +1278 @@
  * Convert all entities to their character counterparts.
  *
- * This function decodes numeric HTML entities (A and A). It doesn't do
- * anything with other entities like ä, but we don't need them in the URL
- * protocol whitelisting system anyway.
+ * This function decodes numeric HTML entities (`A` and `A`).
+ * It doesn't do anything with other entities like ä, but we don't
+ * need them in the URL protocol whitelisting system anyway.
  *
  * @since 1.0.0