Changeset 34149

Timestamp:

09/14/2015 10:48:50 PM (11 years ago)

Author:

nbachiyski

Message:

Shortcodes: don't allow unclosed HTML elements in attributes

Merges [34134] for 3.8 branch

Location:

branches/3.8/src/wp-includes

Files:

• media.php (modified) (1 diff)
• shortcodes.php (modified) (1 diff)

branches/3.8/src/wp-includes/media.php

@@ -635 +635 @@
                         $attr['caption'] = trim( $matches[2] );
                 }
+        } elseif ( strpos( $attr['caption'], '<' ) !== false ) {
+                $attr['caption'] = wp_kses( $attr['caption'], 'post' );
         }
 

branches/3.8/src/wp-includes/shortcodes.php

@@ -449 +449 @@
                                 $atts[] = stripcslashes($m[8]);
                 }
+
+                // Reject any unclosed HTML elements
+                foreach( $atts as &$value ) {
+                        if ( false !== strpos( $value, '<' ) ) {
+                                if ( 1 !== preg_match( '/^[^<]*+(?:<[^>]*+>[^<]*+)*+$/', $value ) ) {
+                                        $value = '';
+                                }
+                        }
+                }
         } else {
                 $atts = ltrim($text);