Changeset 5039 for trunk/wp-includes/default-filters.php

Timestamp:

03/14/2007 11:10:57 PM (19 years ago)

Author:

markjaquith

Message:

nonce-protect comments by users with unfiltered_html cap to prevent xsrf/xss. fixes #3973 for trunk

File:

• trunk/wp-includes/default-filters.php (modified) (1 diff)

trunk/wp-includes/default-filters.php

@@ -31 +31 @@
 add_filter('pre_comment_author_email', 'wp_filter_kses');
 add_filter('pre_comment_author_url', 'wp_filter_kses');
+
+add_action('comment_form', 'wp_comment_form_unfiltered_html_nonce');
 
 // Default filters for these functions