WordPress.org
Get WordPress

Make WordPress Core

Opened 17 years ago

Closed 17 years ago

Last modified 9 years ago

#10336 closed defect (bug) (fixed)

Inline CSS filter for kses

Reported by: azaozz Owned by: ryan
Priority: normal Milestone: 2.8.1
Component: Security Version:
Severity: normal Keywords:
Cc: Focuses:

Description

There are quite a few nasty CSS "tricks" that are currently possible for users without the "unfiltered html" capability. Adding the inline CSS filtering from WPMU with some improvements would close that hole and still allow most basic styles through.

Attachments (1)

kses.patch​ (2.4 KB ) - added by azaozz 17 years ago.

Download all attachments as: .zip

Change History (6)

@azaozz
17 years ago

#1 @ryan
17 years ago

Looks good.

#2 @azaozz
17 years ago

  • Milestone Unassigned → 2.8.1

#3 @azaozz
17 years ago

  • Resolution → fixed
  • Status new → closed

(In [11689]) Inline CSS filter for kses, for trunk, fixes #10336

#4 @azaozz
17 years ago

In [11688] for 2.8.1

This ticket was mentioned in ​Slack in #core-editor by sergey. ​View the logs.
9 years ago

Note: See TracTickets for help on using tickets.