diff --git a/wp-includes/kses.php b/wp-includes/kses.php index 698a9c2e30..db2df03ac1 100644 --- a/wp-includes/kses.php +++ b/wp-includes/kses.php @@ -10,20 +10,37 @@ # # [kses strips evil scripts!] -$allowedtags = array('b' => array(), - 'i' => array(), - 'strong' => array(), - 'code' => array(), - 'acronym' => array('title' => array()), - 'abbr' => array('title' => array()), - 'em' => array(), - 'strike' => array(), - 'a' => array('href' => array(), - 'title' => array(), - 'rel' => array()), +$allowedtags = array( + 'a' => array( + 'href' => array(), + 'title' => array(), + 'rel' => array()), + 'abbr' => array(), + 'acronym' => array(), + 'abbr' => array('title' => array()), + 'acronym' => array('title' => array()), + 'b' => array(), 'blockquote' => array('cite' => array()), + 'br' => array(), + 'code' => array(), 'del' => array('datetime' => array()), - 'br' => array()); + 'dd' => array(), + 'dl' => array(), + 'dt' => array(), + 'em' => array(), + 'i' => array(), + 'ins' => array('datetime' => array(), 'cite' => array()), + 'li' => array(), + 'ol' => array(), + 'p' => array(), + 'q' => array(), + 'strike' => array(), + 'strong' => array(), + 'sub' => array(), + 'sup' => array(), + 'u' => array(), + 'ul' => array(), + ); function wp_kses($string, $allowed_html, $allowed_protocols = array('http', 'https', 'ftp', 'news', 'nntp', 'telnet',