Upstream/WordPress
1
0
Fork 0
mirror of https://github.com/WordPress/WordPress.git synced 2024-12-23 01:27:36 +01:00
Code Issues Projects Releases Wiki Activity

Prevent adjacent hyphens in a HTML/XML comment. Fixes #6642 for trunk. Props schiller.

Browse Source 
git-svn-id: http://svn.automattic.com/wordpress/trunk@8382 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
azaozz 2008-07-21 00:32:43 +00:00
parent a030bdbd5d
commit eb1f1ece79
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
wp-includes/kses.php
View File

@ -431,6 +431,10 @@ function wp_kses_split2($string, $allowed_html, $allowed_protocols) {
$string = $newstring; $string = $newstring;
if ( $string == '' ) if ( $string == '' )
return ''; return '';
// prevent multiple dashes in comments
$string = preg_replace('/--+/', '-', $string);
// prevent three dashes closing a comment
$string = preg_replace('/-$/', '', $string);
return "<!--{$string}-->"; return "<!--{$string}-->";
} }
# Allow HTML comments # Allow HTML comments
@ -1052,4 +1056,4 @@ function kses_init() {
add_action('init', 'kses_init'); add_action('init', 'kses_init');
add_action('set_current_user', 'kses_init'); add_action('set_current_user', 'kses_init');
?> ?>