diff --git a/wp-includes/kses.php b/wp-includes/kses.php index b32df1beaa..286ac69502 100644 --- a/wp-includes/kses.php +++ b/wp-includes/kses.php @@ -2228,6 +2228,7 @@ function kses_init() { * @since 5.3.1 Added support for gradient backgrounds. * @since 5.7.1 Added support for `object-position`. * @since 5.8.0 Added support for `calc()` and `var()` values. + * @since 6.1.0 Added support for `min()`, `max()`, `minmax()`, and `clamp()` values. * * @param string $css A string of CSS rules. * @param string $deprecated Not used. @@ -2467,10 +2468,11 @@ function safecss_filter_attr( $css, $deprecated = '' ) { } if ( $found ) { - // Allow CSS calc(). - $css_test_string = preg_replace( '/calc\(((?:\([^()]*\)?|[^()])*)\)/', '', $css_test_string ); + // Allow some CSS functions. + $css_test_string = preg_replace( '/\b(?:calc|min|max|minmax|clamp)\(((?:\([^()]*\)?|[^()])*)\)/', '', $css_test_string ); + // Allow CSS var(). - $css_test_string = preg_replace( '/\(?var\(--[a-zA-Z0-9_-]*\)/', '', $css_test_string ); + $css_test_string = preg_replace( '/\(?var\(--[\w\-\()[\]\,\s]*\)/', '', $css_test_string ); // Check for any CSS containing \ ( & } = or comments, // except for url(), calc(), or var() usage checked above. diff --git a/wp-includes/version.php b/wp-includes/version.php index 8e014dd7e9..3a4924de3b 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -16,7 +16,7 @@ * * @global string $wp_version */ -$wp_version = '6.1-alpha-54091'; +$wp_version = '6.1-alpha-54092'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.