id,summary,reporter,owner,description,type,status,priority,milestone,component,version,severity,resolution,keywords,cc,focuses 39218,Customize: Harden validation of CSS syntax validity by utilizing tokenizer,westonruter,,"There is a [https://core.trac.wordpress.org/browser/tags/4.7/src/wp-includes/customize/class-wp-customize-custom-css-setting.php#L159 todo comment] in `WP_Customize_Custom_CSS::validate()` setting to implement this: > There are cases where valid CSS can be incorrectly marked as invalid when strings or comments include balancing characters. To fix, CSS tokenization needs to be used. The current approach to validating syntax via regular expressions is too naïve. See #39198.",defect (bug),closed,normal,4.9,Customize,4.7,normal,fixed,,,