albass, trac spammer

[junsuijin]

Every ticket updated between 2am and 3am CST, Aug 17, 2009, by user albass, is a spam link. Please remove them all. In addition to the removal of affected posts and/or tickets, it would be great to include bad behavior (bot trap), and possibly an additional filter against this type of spam (in case it is human spam).

The affected tickets:
#4583, #5377, #3319, #7672, #6341, #4608, #1704, #1894, #494, #1770, #8336, #5778, #3861, #5683, #19, #7787, #792, #763, #8614, #2664, #2109, #8966, #2887, #9891, #3795, #7719, #6031, #4420, #6775, #9080, #6605, #5733, #7030, #371, #8010, #8573, #5487, #3550, #8700, #2735, #8023, #5936, #2180, #2753, #5668, #9694, #6697, #8318, #4300, #2145, #4278, #4844, #5246, #8018, #217, #3282, #6317, #6679, #777, #541, #7524, #294, #5646, #2497, #6083, #2163, #9569, #181, #4159, #9222, #2472, #7526, #923, #5959, #6172, #5722, #400, #3992, #2586, #1348, #6661, #9194, #8721, #7701, #4553, #2704, #6951, #3442, #3663, #291, #4389, #1871, #8629, #2885, #3199, #1440, #9246

[barry]

Deleted all the spam comments.

[scribu]

Found another jocker here: ​http://core.trac.wordpress.org/ticket/6681#comment:11

[scribu]

no spammers for now.

Includes #10635

Trac ticket:

[61477] has been merged and this PR has been updated. It's ready for review.

It includes tests updates in ​https://github.com/WordPress/wordpress-develop/pull/10727 which can be landed separately.

A nice improvement with this change:

echo wp_get_script_tag( array( "<" => "less-than" ) );

Warns:

Notice: Function WP_HTML_Tag_Processor::set_attribute was called <strong>incorrectly</strong>. Invalid attribute name.

And prints:

<script></script>

On trunk, there would be no warning and the following would be printed (because esc_attr(), although unsuitable, was used on the attribute name):

<script &lt;="less-than"></script>

This SCRIPT tag has an attribute literally named <.

I'd like to land ​https://github.com/WordPress/wordpress-develop/pull/10728 first so it's clear that the attribute handling is unchanged from trunk in this change.