Make WordPress Core

Changes between Version 1 and Version 2 of Ticket #24301, comment 6


Ignore:
Timestamp:
05/10/2013 03:37:16 PM (12 years ago)
Author:
SergeyBiryukov
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #24301, comment 6

    v1 v2  
    11Apart from a missing quote, it's also fairly easy to break the admin by inserting a closing `</div>` tag here.
    22
    3 [attachment:24301.patch] adds `strip_tags( $value, '<img>' )`. It turned out that it helps with the missing quote too, `strip_tags()` removes the broken markup.
     3[attachment:24301.patch] adds `strip_tags( $value, '<img>' )` to only allow `<img>` tags. It turned out that this helps with the missing quote too, `strip_tags()` removes the broken markup.