Changeset 54537 for branches/6.0/src/wp-includes/comment.php

Timestamp:

10/17/2022 12:31:51 PM (2 years ago)

Author:

audrasjb

Message:

Comments: Apply kses when editing comments.

Props davidbaumwald, xknown, peterwilsoncc, paulkevan.
Merges [54527] to the 6.0 branch.

Location:

branches/6.0

Files:

• . (modified) (1 prop)
• src/wp-includes/comment.php (modified) (2 diffs)

branches/6.0/src/wp-includes/comment.php

@@ -2465 +2465 @@
     }
 
+    $filter_comment = false;
+    if ( ! has_filter( 'pre_comment_content', 'wp_filter_kses' ) ) {
+        $filter_comment = ! user_can( isset( $comment['user_id'] ) ? $comment['user_id'] : 0, 'unfiltered_html' );
+    }
+
+    if ( $filter_comment ) {
+        add_filter( 'pre_comment_content', 'wp_filter_kses' );
+    }
+
     // Escape data pulled from DB.
     $comment = wp_slash( $comment );
@@ -2474 +2483 @@
 
     $commentarr = wp_filter_comment( $commentarr );
+
+    if ( $filter_comment ) {
+        remove_filter( 'pre_comment_content', 'wp_filter_kses' );
+    }
 
     // Now extract the merged array.