Changeset 8383

Timestamp:

07/21/2008 12:47:08 AM (17 years ago)

Author:

azaozz

Message:

Prevent adjacent hyphens in a HTML/XML comment. Fixes #6642 for 2.6.1. Props schiller.

File:

• branches/2.6/wp-includes/kses.php (modified) (1 diff)

branches/2.6/wp-includes/kses.php

@@ -432 +432 @@
         if ( $string == '' )
             return '';
+        // prevent multiple dashes in comments
+        $string = preg_replace('/--+/', '-', $string);
+        // prevent three dashes closing a comment
+        $string = preg_replace('/-$/', '', $string);
         return "<!--{$string}-->";
     }