Pass comments through kses. Props tsimmons. fixes #2130 #2167

git-svn-id: http://svn.automattic.com/wordpress/trunk@3417 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2006-01-09 23:49:56 +00:00
parent 0962ff9bff
commit ea84ce4551
1 changed files with 5 additions and 1 deletions

View File

@ -77,7 +77,7 @@ function wp_kses_split($string, $allowed_html, $allowed_protocols)
# matches stray ">" characters.
###############################################################################
{
return preg_replace('%(<'.# EITHER: <
return preg_replace('%(<!--.*?-->)|(<'.# EITHER: <
'[^>]*'.# things that aren't >
'(>|$)'.# > or end of string
'|>)%e', # OR: just a >
@ -98,6 +98,10 @@ function wp_kses_split2($string, $allowed_html, $allowed_protocols)
return '&gt;';
# It matched a ">" character
if (preg_match('%^<!--.*-->$%', $string))
return $string;
# Allow HTML comments
if (!preg_match('%^<\s*(/\s*)?([a-zA-Z0-9]+)([^>]*)>?$%', $string, $matches))
return '';
# It's seriously malformed