Ticket #3515: proto.diff

wp-includes/formatting.php

@@ -1056 +1056 @@
-        return apply_filters('richedit_pre', $output);
-}
-
-
+, $protocols = null
-        if ('' == $url) return $url;
-        $url = preg_replace('|[^a-z0-9-~+_.?#=!&;,/:%]|i', '', $url);
-        $strip = array('%0d', '%0a');
@@ -1064 +1064 @@
-        $url = str_replace(';//', '://', $url);
-        $url = (!strstr($url, '://')) ? 'http://'.$url : $url;
-        $url = preg_replace('/&([^#])(?![a-z]{2,8};)/', '&$1', $url);
+        if ( !is_array($protocols) )
+                $protocols = array('http', 'https', 'ftp', 'ftps', 'mailto', 'news', 'irc', 'gopher', 'nntp', 'feed', 'telnet'); 
+        if ( wp_kses_bad_protocol( $url, $protocols ) != $url )
+                return '';
-        return $url;
-}
-