Changeset 7370 for trunk/wp-includes/kses.php

Timestamp:

03/18/2008 01:53:36 AM (18 years ago)

Author:

ryan

Message:

Better protocol check from Łukasz Pilorz.

File:

• trunk/wp-includes/kses.php (modified) (1 diff)

trunk/wp-includes/kses.php

@@ -833 +833 @@
     global $_kses_allowed_protocols;
     $_kses_allowed_protocols = $allowed_protocols;
-    return preg_replace_callback('/^((&[^;]*;|[\sA-Za-z0-9])*)'.'(:|:|&#[Xx]3[Aa];)\s*/', create_function('$matches', 'global $_kses_allowed_protocols; return wp_kses_bad_protocol_once2($matches[1], $_kses_allowed_protocols);'), $string);
+
+    $string2 = preg_split('/:|:|:/i', $string, 2);
+    if ( isset($string2[1]) && !preg_match('%/\?%', $string2[0]) )
+        $string = wp_kses_bad_protocol_once2($string2[0], $allowed_protocols) . trim($string2[1]);
+    else
+        $string = preg_replace_callback('/^((&[^;]*;|[\sA-Za-z0-9])*)'.'(:|:|&#[Xx]3[Aa];)\s*/', create_function('$matches', 'global $_kses_allowed_protocols; return wp_kses_bad_protocol_once2($matches[1], $_kses_allowed_protocols);'), $string);
+
+    return $string;
 }