Changeset 8382 for trunk/wp-includes/kses.php

Timestamp:

07/21/2008 12:32:43 AM (18 years ago)

Author:

azaozz

Message:

Prevent adjacent hyphens in a HTML/XML comment. Fixes #6642 for trunk. Props schiller.

File:

• trunk/wp-includes/kses.php (modified) (1 diff)

trunk/wp-includes/kses.php

@@ -432 +432 @@
                 if ( $string == '' )
                         return '';
+                // prevent multiple dashes in comments
+                $string = preg_replace('/--+/', '-', $string);
+                // prevent three dashes closing a comment
+                $string = preg_replace('/-$/', '', $string);
                 return "<!--{$string}-->";
         }