Changeset 5040 for branches/2.1/wp-includes/default-filters.php

Timestamp:

03/14/07 23:12:47 (2 years ago)

Author:

markjaquith

Message:

nonce-protect comments by users with unfiltered_html cap to prevent xsrf/xss. fixes #3973 for 2.1

Files:

• branches/2.1/wp-includes/default-filters.php (modified) (1 diff)

branches/2.1/wp-includes/default-filters.php

@@ -31 +31 @@
-add_filter('pre_comment_author_email', 'wp_filter_kses');
-add_filter('pre_comment_author_url', 'wp_filter_kses');
+
+add_action('comment_form', 'wp_comment_form_unfiltered_html_nonce');
-
-// Default filters for these functions