Changeset 34144 for branches/4.3/src/wp-includes/media.php

Timestamp:

09/14/2015 10:46:42 PM (11 years ago)

Author:

nbachiyski

Message:

Shortcodes: don't allow unclosed HTML elements in attributes

Merges [34134] for 4.3 branch

File:

• branches/4.3/src/wp-includes/media.php (modified) (1 diff)

branches/4.3/src/wp-includes/media.php

@@ -864 +864 @@
                         $attr['caption'] = trim( $matches[2] );
                 }
+        } elseif ( strpos( $attr['caption'], '<' ) !== false ) {
+                $attr['caption'] = wp_kses( $attr['caption'], 'post' );
         }