Changeset 58476 for branches/6.3/src/wp-includes/formatting.php

Timestamp:

06/24/2024 03:10:50 PM (13 months ago)

Author:

audrasjb

Message:

Grouped Backports to the 6.3 branch.

• Editor: Fix Path Traversal issue on Windows in Template-Part Block.
• Editor: Sanitize Template Part HTML tag on save.
• HTML API: Run URL attributes through esc_url().

Merges [58470], [58471], [58472] and [58473] to the 6.3 branch.
Props xknown, peterwilsoncc, jorbin, bernhard-reiter, azaozz, dmsnell, gziolo.

File:

• branches/6.3/src/wp-includes/formatting.php (modified) (2 diffs)

branches/6.3/src/wp-includes/formatting.php

@@ -4786 +4786 @@
  *
  * @since 2.5.0
+ * @since 6.5.5 Allow hyphens in tag names (i.e. custom elements).
  *
  * @param string $tag_name
@@ -4791 +4792 @@
  */
 function tag_escape( $tag_name ) {
-    $safe_tag = strtolower( preg_replace( '/[^a-zA-Z0-9_:]/', '', $tag_name ) );
+    $safe_tag = strtolower( preg_replace( '/[^a-zA-Z0-9-_:]/', '', $tag_name ) );
     /**
      * Filters a string cleaned and escaped for output as an HTML tag.