WordPress.org
Get WordPress

Make WordPress Core

Opened 5 weeks ago

Closed 4 weeks ago

Last modified 2 weeks ago

#61318 closed defect (bug) (fixed)

wp_trigger_error() strips out allowed HTML tags

Reported by: thelovekesh's profile thelovekesh Owned by: thelovekesh's profile thelovekesh
Milestone: 6.6 Priority: normal
Severity: normal Version: trunk
Component: General Keywords: has-patch has-unit-tests
Focuses: Cc:

Description

The function wp_trigger_error() allows certain HTML tags in the error message. However, it isn't working correctly because wp_kses() expects the allowed HTML tags to be specified in an associative array format.

Change History (6)

This ticket was mentioned in ​PR #6671 on ​WordPress/wordpress-develop by ​@thelovekesh.
5 weeks ago #1

  • Keywords has-patch has-unit-tests added

Update allowed HTML tags declaration in wp_trigger_error().

Trac ticket: https://core.trac.wordpress.org/ticket/61318

​@thelovekesh commented on ​PR #6671:
5 weeks ago #2

Hey @hellofromtonya 👋🏼

Can you please review this PR? Thanks.

#3 @westonruter
4 weeks ago

  • Resolution set to fixed
  • Status changed from assigned to closed

In 58361:

General: Fix array format for allowed HTML passed into wp_kses() for wp_trigger_error().

Kses requires an associative array of allowed HTML.

See #57686. Follow-up to [56707].

Props thelovekesh, westonruter.
Fixes #61318.

​@westonruter commented on ​PR #6671:
4 weeks ago #4

Committed in r58361 (da1ad31).

#5 @kebbet
2 weeks ago

@westonruter Could you please milestone this ticket in 6.6, thanks!

#6 @sabernhardt
2 weeks ago

  • Milestone changed from Awaiting Review to 6.6
Note: See TracTickets for help on using tickets.