WordPress.org

Make WordPress Core


Ignore:
Timestamp:
09/14/2015 10:48:11 PM (4 years ago)
Author:
nbachiyski
Message:

Shortcodes: don't allow unclosed HTML elements in attributes

Merges [34134] for 4.0 branch

File:
1 edited

Legend:

Unmodified
Added
Removed
  • branches/4.0/src/wp-includes/media.php

    r30423 r34147  
    802802            $attr['caption'] = trim( $matches[2] );
    803803        }
     804    } elseif ( strpos( $attr['caption'], '<' ) !== false ) {
     805        $attr['caption'] = wp_kses( $attr['caption'], 'post' );
    804806    }
    805807
Note: See TracChangeset for help on using the changeset viewer.