Changeset 44136 for trunk/tests/phpunit/tests/shortcode.php

Timestamp:

12/14/2018 01:40:50 AM (5 years ago)

Author:

pento

Message:

KSES: Allow url() to be used in inline CSS.

The cover image block uses the url() function in its inline CSS, to show the cover image. KSES didn't allow this, causing the block to not save correctly for Author and Contributor users. As KSES does already check each attribute name against an allowed list, we're able to add an extra check for certain attributes to be able to use the url() function, too.

Merges [43781] from the 5.0 branch to core.

Props peterwilsoncc, azaozz, pento, dd32.
Fixes #45067.

Location:

trunk

Files:

• . (modified) (1 prop)
• tests/phpunit/tests/shortcode.php (modified) (1 diff)

trunk/tests/phpunit/tests/shortcode.php

@@ -562 +562 @@
             ),
             array(
-                '<div style="background:url([[gallery]])">',
-                '<div style="background:url([[gallery]])">',
+                '<div style="selector:url([[gallery]])">',
+                '<div style="selector:url([[gallery]])">',
             ),
             array(