WordPress.org

Make WordPress Core

Opened 10 years ago

Closed 10 years ago

Last modified 2 years ago

#10336 closed defect (bug) (fixed)

Inline CSS filter for kses

Reported by: azaozz Owned by: ryan
Milestone: 2.8.1 Priority: normal
Severity: normal Version:
Component: Security Keywords:
Focuses: Cc:
PR Number:

Description

There are quite a few nasty CSS "tricks" that are currently possible for users without the "unfiltered html" capability. Adding the inline CSS filtering from WPMU with some improvements would close that hole and still allow most basic styles through.

Attachments (1)

kses.patch (2.4 KB) - added by azaozz 10 years ago.

Download all attachments as: .zip

Change History (6)

@azaozz
10 years ago

#1 @ryan
10 years ago

Looks good.

#2 @azaozz
10 years ago

  • Milestone changed from Unassigned to 2.8.1

#3 @azaozz
10 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [11689]) Inline CSS filter for kses, for trunk, fixes #10336

#4 @azaozz
10 years ago

In [11688] for 2.8.1

This ticket was mentioned in Slack in #core-editor by sergey. View the logs.


2 years ago

Note: See TracTickets for help on using tickets.