[wp-trac] [WordPress Trac] #37208: Comment blacklist can be bypassed with HTML

WordPress Trac noreply at wordpress.org
Wed Jul 13 03:15:00 UTC 2016


#37208: Comment blacklist can be bypassed with HTML
---------------------------------------------+------------------
 Reporter:  cfinke                           |       Owner:
     Type:  defect (bug)                     |      Status:  new
 Priority:  normal                           |   Milestone:  4.6
Component:  Comments                         |     Version:  1.5
 Severity:  normal                           |  Resolution:
 Keywords:  has-patch has-unit-tests commit  |     Focuses:
---------------------------------------------+------------------
Changes (by rachelbaker):

 * keywords:  has-patch needs-unit-tests => has-patch has-unit-tests commit
 * milestone:  Future Release => 4.6


Comment:

 In [attachment:37208.2.diff] I added some basic unit tests for
 `wp_blacklist_check` including
 `test_should_return_true_when_content_with_html_matches_blacklist_keys`

--
Ticket URL: <https://core.trac.wordpress.org/ticket/37208#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list