WordPress.org

Make WordPress Core

Opened 11 years ago

Closed 11 years ago

Last modified 3 years ago

#10336 closed defect (bug) (fixed)

Inline CSS filter for kses

Reported by: azaozz Owned by: ryan
Milestone: 2.8.1 Priority: normal
Severity: normal Version:
Component: Security Keywords:
Focuses: Cc:

Description

There are quite a few nasty CSS "tricks" that are currently possible for users without the "unfiltered html" capability. Adding the inline CSS filtering from WPMU with some improvements would close that hole and still allow most basic styles through.

Attachments (1)

kses.patch (2.4 KB) - added by azaozz 11 years ago.

Download all attachments as: .zip

Change History (6)

@azaozz
11 years ago

#1 @ryan
11 years ago

Looks good.

#2 @azaozz
11 years ago

  • Milestone changed from Unassigned to 2.8.1

#3 @azaozz
11 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [11689]) Inline CSS filter for kses, for trunk, fixes #10336

#4 @azaozz
11 years ago

In [11688] for 2.8.1

This ticket was mentioned in Slack in #core-editor by sergey. View the logs.


3 years ago

Note: See TracTickets for help on using tickets.