WordPress.org
Get WordPress

Make WordPress Core

Opened 17 years ago

Closed 15 years ago

Last modified 15 years ago

#6602 closed defect (bug) (fixed)

kses Should Prevent Duplicate Attributes

Reported by: schiller's profile schiller Owned by:
Milestone: 2.6.1 Priority: normal
Severity: normal Version: 2.6
Component: General Keywords: has-patch 2nd-opinion
Focuses: Cc:

Description

The following is allowed, which would break a blog using strict XHTML:

<a href='foo' href='foo'>blah</a>

Attachments (1)

bug6602.patch​ (3.0 KB) - added by schiller 17 years ago.
Updated patch to take first attribute and ignore later duplicate attributes (per Sam Ruby's comment)

Download all attachments as: .zip

Change History (12)

#1 @schiller
17 years ago

  • Cc rubys@… added

@schiller
17 years ago

Updated patch to take first attribute and ignore later duplicate attributes (per Sam Ruby's comment)

#2 @schiller
17 years ago

  • Keywords has-patch 2nd-opinion added; xhtml kses removed

#3 @schiller
17 years ago

  • Milestone changed from 2.7 to 2.5.1

#4 @lloydbudd
17 years ago

  • Milestone changed from 2.5.2 to 2.6
  • Version set to 2.5.1

#5 @azaozz
16 years ago

  • Milestone changed from 2.9 to 2.7

#6 @azaozz
16 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [8384]) Take first attribute and ignore later duplicate attributes. Fixes #6602 for trunk. Props schiller.

#7 @azaozz
16 years ago

  • Milestone changed from 2.7 to 2.6.1
  • Resolution fixed deleted
  • Status changed from closed to reopened

Re-open for 2.6.1

#8 @azaozz
16 years ago

  • Resolution set to fixed
  • Status changed from reopened to closed

(In [8385]) Take first attribute and ignore later duplicate attributes. Fixes #6602 for 2.6.1. Props schiller.

#9 @codedread
15 years ago

  • Resolution fixed deleted
  • Status changed from closed to reopened
  • Version changed from 2.5.1 to 2.9.1

Bug appears to still be valid in WP 2.9.1, despite my patch being in kses.php

#10 @nacin
15 years ago

  • Resolution set to fixed
  • Status changed from reopened to closed
  • Version changed from 2.9.1 to 2.6

Re-closing (see #6642:comment:15)

#11 @rubys
15 years ago

  • Cc rubys@… removed
Note: See TracTickets for help on using tickets.