WordPress.org
Get WordPress

Make WordPress Core

Opened 15 years ago

Closed 15 years ago

Last modified 15 years ago

#16042 closed defect (bug) (wontfix)

KSES related XSS Security issue for 2.9

Reported by: hakre's profile hakre Owned by:
Milestone: Priority: normal
Severity: normal Version: 2.9.2
Component: General Keywords: has-patch
Focuses: Cc:

Description

As the issue is rated as seriously and I could reproduce it on my 2.9.2 testbed and 3.1 is not released yet I backported the kses changes for 2.9.2.

Attachments (1)

16042-full.patch​ (17.4 KB) - added by hakre 15 years ago.
Patch against branch 2.9

Download all attachments as: .zip

Change History (5)

@hakre
15 years ago

Patch against branch 2.9

#1 @hakre
15 years ago

This patch includes the requirements by Ulf Härnhammar as in #16039

#2 follow-up: @westi
15 years ago

  • Resolution set to wontfix
  • Status changed from new to closed

2.9 branch is no longer maintained since we went to beta for 3.1

#3 @ocean90
15 years ago

  • Milestone Awaiting Review deleted

#4 in reply to: ↑ 2 @hakre
15 years ago

Replying to westi:

2.9 branch is no longer maintained since we went to beta for 3.1

Can such a kind of rule be seen anywhere? Would be great to know.

Note: See TracTickets for help on using tickets.