diff --git a/wp-includes/kses.php b/wp-includes/kses.php index 286ac69502..b32df1beaa 100644 --- a/wp-includes/kses.php +++ b/wp-includes/kses.php @@ -2228,7 +2228,6 @@ function kses_init() { * @since 5.3.1 Added support for gradient backgrounds. * @since 5.7.1 Added support for `object-position`. * @since 5.8.0 Added support for `calc()` and `var()` values. - * @since 6.1.0 Added support for `min()`, `max()`, `minmax()`, and `clamp()` values. * * @param string $css A string of CSS rules. * @param string $deprecated Not used. @@ -2468,11 +2467,10 @@ function safecss_filter_attr( $css, $deprecated = '' ) { } if ( $found ) { - // Allow some CSS functions. - $css_test_string = preg_replace( '/\b(?:calc|min|max|minmax|clamp)\(((?:\([^()]*\)?|[^()])*)\)/', '', $css_test_string ); - + // Allow CSS calc(). + $css_test_string = preg_replace( '/calc\(((?:\([^()]*\)?|[^()])*)\)/', '', $css_test_string ); // Allow CSS var(). - $css_test_string = preg_replace( '/\(?var\(--[\w\-\()[\]\,\s]*\)/', '', $css_test_string ); + $css_test_string = preg_replace( '/\(?var\(--[a-zA-Z0-9_-]*\)/', '', $css_test_string ); // Check for any CSS containing \ ( & } = or comments, // except for url(), calc(), or var() usage checked above. diff --git a/wp-includes/version.php b/wp-includes/version.php index 3a4924de3b..9677927709 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -16,7 +16,7 @@ * * @global string $wp_version */ -$wp_version = '6.1-alpha-54092'; +$wp_version = '6.1-alpha-54093'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.