Changeset 5040 for branches/2.1/wp-includes/default-filters.php

Timestamp:

03/14/2007 11:12:47 PM (19 years ago)

Author:

markjaquith

Message:

nonce-protect comments by users with unfiltered_html cap to prevent xsrf/xss. fixes #3973 for 2.1

File:

• branches/2.1/wp-includes/default-filters.php (modified) (1 diff)

branches/2.1/wp-includes/default-filters.php

@@ -31 +31 @@
 add_filter('pre_comment_author_email', 'wp_filter_kses');
 add_filter('pre_comment_author_url', 'wp_filter_kses');
+
+add_action('comment_form', 'wp_comment_form_unfiltered_html_nonce');
 
 // Default filters for these functions