Make WordPress Core

Opened 7 weeks ago

Closed 5 weeks ago

Last modified 4 weeks ago

#61318 closed defect (bug) (fixed)

wp_trigger_error() strips out allowed HTML tags

Reported by: thelovekesh's profile thelovekesh Owned by: thelovekesh's profile thelovekesh
Milestone: 6.6 Priority: normal
Severity: normal Version: trunk
Component: General Keywords: has-patch has-unit-tests
Focuses: Cc:


The function wp_trigger_error() allows certain HTML tags in the error message. However, it isn't working correctly because wp_kses() expects the allowed HTML tags to be specified in an associative array format.

Change History (6)

This ticket was mentioned in PR #6671 on WordPress/wordpress-develop by @thelovekesh.

7 weeks ago

  • Keywords has-patch has-unit-tests added

Update allowed HTML tags declaration in wp_trigger_error().

Trac ticket:

@thelovekesh commented on PR #6671:

7 weeks ago

Hey @hellofromtonya 👋🏼

Can you please review this PR? Thanks.

#3 @westonruter
5 weeks ago

  • Resolution set to fixed
  • Status changed from assigned to closed

In 58361:

General: Fix array format for allowed HTML passed into wp_kses() for wp_trigger_error().

Kses requires an associative array of allowed HTML.

See #57686. Follow-up to [56707].

Props thelovekesh, westonruter.
Fixes #61318.

@westonruter commented on PR #6671:

5 weeks ago

Committed in r58361 (da1ad31).

#5 @kebbet
4 weeks ago

@westonruter Could you please milestone this ticket in 6.6, thanks!

#6 @sabernhardt
4 weeks ago

  • Milestone changed from Awaiting Review to 6.6
Note: See TracTickets for help on using tickets.