Changes from trunk/src/wp-includes/shortcodes.php at r33627 to branches/4.3/src/wp-includes/shortcodes.php at r34144

File:

• branches/4.3/src/wp-includes/shortcodes.php (modified) (1 diff)

branches/4.3/src/wp-includes/shortcodes.php

@@ -463 +463 @@
                                 $atts[] = stripcslashes($m[8]);
                 }
+
+                // Reject any unclosed HTML elements
+                foreach( $atts as &$value ) {
+                        if ( false !== strpos( $value, '<' ) ) {
+                                if ( 1 !== preg_match( '/^[^<]*+(?:<[^>]*+>[^<]*+)*+$/', $value ) ) {
+                                        $value = '';
+                                }
+                        }
+                }
         } else {
                 $atts = ltrim($text);