mirror_php/wordpress
1
0
Fork 0
mirror of git://develop.git.wordpress.org/ synced 2025-02-24 08:33:35 +01:00
Code Issues Actions 11 Packages Projects Releases Wiki Activity

Backtick-escape three sets of HTML entities used in DocBlock descriptions in wp-includes/kses.php.

Browse Source 
Without the escaping, the Code Reference/browser may inadvertently attempt to convert and display entities.

Fixes #30473.


git-svn-id: https://develop.svn.wordpress.org/trunk@30720 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Drew Jaynes (DrewAPicture) 2014-12-03 08:46:31 +00:00
parent 6213bb9689
commit bf8544d9fa
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/wp-includes/kses.php
View File

@ -1172,8 +1172,8 @@ function wp_kses_bad_protocol_once2( $string, $allowed_protocols ) {
/** /**
* Converts and fixes HTML entities. * Converts and fixes HTML entities.
* *
* This function normalizes HTML entities. It will convert "AT&T" to the correct * This function normalizes HTML entities. It will convert `AT&T` to the correct
* "AT&T", ":" to ":", "&#XYZZY;" to "&#XYZZY;" and so on. * `AT&T", ":" to ":", "&#XYZZY;" to "&#XYZZY;` and so on.
* *
* @since 1.0.0 * @since 1.0.0
* *
@ -1218,8 +1218,8 @@ function wp_kses_named_entities($matches) {
/** /**
* Callback for wp_kses_normalize_entities() regular expression. * Callback for wp_kses_normalize_entities() regular expression.
* *
* This function helps wp_kses_normalize_entities() to only accept 16-bit values * This function helps {@see wp_kses_normalize_entities()} to only accept 16-bit
* and nothing more for &#number; entities. * values and nothing more for `&#number;` entities.
* *
* @access private * @access private
* @since 1.0.0 * @since 1.0.0
@ -1277,9 +1277,9 @@ function valid_unicode($i) {
/** /**
* Convert all entities to their character counterparts. * Convert all entities to their character counterparts.
* *
* This function decodes numeric HTML entities (A and A). It doesn't do * This function decodes numeric HTML entities (`A` and `A`).
* anything with other entities like ä, but we don't need them in the URL * It doesn't do anything with other entities like ä, but we don't
* protocol whitelisting system anyway. * need them in the URL protocol whitelisting system anyway.
* *
* @since 1.0.0 * @since 1.0.0
* *