Changeset 55184

Timestamp:

02/01/2023 10:50:11 PM (20 months ago)

Author:

hellofromTonya

Message:

KSES: Allow position-related CSS properties.

Adds support for the following CSS properties considered safe for inline CSS:

• position
• top
• right
• bottom
• left
• z-index

References:

• ​Gutenberg PR 46142.

Follow-up to [54117].

Props andrewserong, mukesh27.
Fixes #57504.

Location:

trunk

Files:

• src/wp-includes/kses.php (modified) (2 diffs)
• tests/phpunit/tests/kses.php (modified) (1 diff)

trunk/src/wp-includes/kses.php

@@ -2278 +2278 @@
  *              Added support for `object-fit`, `gap`, `column-gap`, `row-gap`, and `flex-wrap`.
  *              Extended `margin-*` and `padding-*` support for logical properties.
+ * @since 6.2.0 Added support for `position`, `top`, `right`, `bottom`, `left` and `z-index` position CSS properties.
  *
  * @param string $css        A string of CSS rules.
@@ -2439 +2440 @@
             'vertical-align',
 
+            'position',
+            'top',
+            'right',
+            'bottom',
+            'left',
+            'z-index',
+
             // Custom CSS properties.
             '--*',

trunk/tests/phpunit/tests/kses.php

@@ -1279 +1279 @@
                 'expected' => '',
             ),
+            // Position properties introduced in 6.2.
+            array(
+                'css'      => 'position: sticky;top: 0;left: 0;right: 0;bottom: 0;z-index: 10;',
+                'expected' => 'position: sticky;top: 0;left: 0;right: 0;bottom: 0;z-index: 10',
+            ),
         );
     }