Changeset 8382

Timestamp:

07/21/08 00:32:43 (4 months ago)

Author:

azaozz

Message:

Prevent adjacent hyphens in a HTML/XML comment. Fixes #6642 for trunk. Props schiller.

Files:

• trunk/wp-includes/kses.php (modified) (1 diff)

trunk/wp-includes/kses.php

@@ -432 +432 @@
-        if ( $string == '' )
-            return '';
+        // prevent multiple dashes in comments
+        $string = preg_replace('/--+/', '-', $string);
+        // prevent three dashes closing a comment
+        $string = preg_replace('/-$/', '', $string);
-        return "<!--{$string}-->";
-    }