Opened 20 months ago
Last modified 18 months ago
#55605 new defect (bug)
kses "selected" for option
Reported by: |
|
Owned by: | |
---|---|---|---|
Milestone: | Awaiting Review | Priority: | normal |
Severity: | normal | Version: | 2.9 |
Component: | Security | Keywords: | has-patch |
Focuses: | Cc: |
Description
<select> <option>A</option> <option selected>B</option> <option>C</option> </select>
wp_kses_post should not strip the "selected" from option
Change History (3)
Note: See
TracTickets for help on using
tickets.
Trac ticket: https://core.trac.wordpress.org/ticket/55605
Additionally:
*
Attributes are mostly based on https://developer.mozilla.org/en-US/docs/Web/HTML/Element with some containing browser specifics which were introduced in the last years.
The tags were chosen based on a WP installation that contains the most popular WP + WooCommerce plugins, as well as features introduced by browsers (e.g. picture tag)