Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2025-01-03 15:08:10 +01:00
Code Issues Projects Releases Wiki Activity

Entitize lone less-than characters. Props mdawaffe. fixes #4409

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/trunk@5783 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
markjaquith 2007-07-06 12:53:15 +00:00
parent 821cf4b63f
commit 2304077c2b
3 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
wp-includes/default-filters.php
View File

@ -12,6 +12,7 @@ add_filter('the_title', 'wptexturize');
add_filter('the_content', 'wptexturize'); add_filter('the_content', 'wptexturize');
add_filter('the_excerpt', 'wptexturize'); add_filter('the_excerpt', 'wptexturize');
add_filter('bloginfo', 'wptexturize'); add_filter('bloginfo', 'wptexturize');
add_filter('pre_kses', 'wp_pre_kses_less_than');
// Comments, trackbacks, pingbacks // Comments, trackbacks, pingbacks
add_filter('pre_comment_author_name', 'strip_tags'); add_filter('pre_comment_author_name', 'strip_tags');

11
wp-includes/formatting.php
View File

@ -1195,4 +1195,15 @@ function wp_parse_str( $string, &$array ) {
$array = apply_filters( 'wp_parse_str', $array ); $array = apply_filters( 'wp_parse_str', $array );
} }
// Convert lone less than signs. KSES already converts lone greater than signs.
function wp_pre_kses_less_than( $text ) {
return preg_replace_callback('%<[^>]*?((?=<)|>|$)%', 'wp_pre_kses_less_than_callback', $text);
}
function wp_pre_kses_less_than_callback( $matches ) {
if ( false === strpos($matches[0], '>') )
return wp_specialchars($matches[0]);
return $matches[0];
}
?> ?>

5
wp-includes/kses.php
View File

@ -230,16 +230,17 @@ function wp_kses($string, $allowed_html, $allowed_protocols = array ('http', 'ht
$string = wp_kses_no_null($string); $string = wp_kses_no_null($string);
$string = wp_kses_js_entities($string); $string = wp_kses_js_entities($string);
$string = wp_kses_normalize_entities($string); $string = wp_kses_normalize_entities($string);
$string = wp_kses_hook($string);
$allowed_html_fixed = wp_kses_array_lc($allowed_html); $allowed_html_fixed = wp_kses_array_lc($allowed_html);
$string = wp_kses_hook($string, $allowed_html_fixed, $allowed_protocols); // WP changed the order of these funcs and added args to wp_kses_hook
return wp_kses_split($string, $allowed_html_fixed, $allowed_protocols); return wp_kses_split($string, $allowed_html_fixed, $allowed_protocols);
} # function wp_kses } # function wp_kses
function wp_kses_hook($string) function wp_kses_hook($string, $allowed_html, $allowed_protocols)
############################################################################### ###############################################################################
# You add any kses hooks here. # You add any kses hooks here.
############################################################################### ###############################################################################
{ {
$string = apply_filters( 'pre_kses', $string );
return $string; return $string;
} # function wp_kses_hook } # function wp_kses_hook