Make WordPress Core

Opened 18 years ago

Closed 17 years ago

Last modified 17 years ago

#2061 closed defect (bug) (duplicate)

A single < in comments cause the rest of the comment to be lost

Reported by: allan's profile allan Owned by: markjaquith's profile markjaquith
Milestone: Priority: normal
Severity: normal Version: 1.5.2
Component: General Keywords: has-patch dev-feedback
Focuses: Cc:

Description

If a comment contain a < which is not part of a tag, everything after (and including) that character gets lost (often users will forget to escape such character).

E.g. this: cat <file|tr ...

becomes (after the wp_filter_kses): cat

Attachments (1)

kses_escape_literal_lower_than.patch (963 bytes) - added by allan 18 years ago.
Patch to fix the problem

Download all attachments as: .zip

Change History (8)

@allan
18 years ago

Patch to fix the problem

#1 @markjaquith
18 years ago

  • Keywords bg|has-patch added
  • Owner changed from anonymous to markjaquith
  • Status changed from new to assigned

#2 @error
18 years ago

  • Keywords bg|dev-feedback added
  • Milestone set to 2.1

Verified present in 2.0.4.

#3 @matt
17 years ago

  • Milestone changed from 2.1 to 2.2

#4 @rob1n
17 years ago

I believe this is because KSES strips elements that are horribly formed (an open <, and continued text), which, technically, could be an element.

#5 @foolswisdom
17 years ago

  • Keywords has-patch dev-feedback added; bg|has-patch bg|dev-feedback removed
  • Milestone changed from 2.2 to 2.3

#6 @westi
17 years ago

  • Resolution set to duplicate
  • Status changed from assigned to closed

I believe this has been fixed by the changes for #4409

#7 @Nazgul
17 years ago

  • Milestone 2.3 (trunk) deleted
Note: See TracTickets for help on using tickets.