[wpmu-trac] [WordPress MU Trac] #1067: Stripslashes needed on text widget

WordPress MU Trac wpmu-trac at lists.automattic.com
Mon Jul 20 19:16:56 UTC 2009


#1067: Stripslashes needed on text widget
------------------------+---------------------------------------------------
 Reporter:  DeannaS     |       Owner:  somebody
     Type:  defect      |      Status:  new     
 Priority:  normal      |   Milestone:          
Component:  component1  |     Version:          
 Severity:  normal      |    Keywords:          
------------------------+---------------------------------------------------
 In wp-includes\default-widgets.php, line 394 should read

 {{{
 $instance['text'] = stripslashes(wp_filter_post_kses(
 $new_instance['text'] ));
 }}}


 instead of:

 {{{
 $instance['text'] = wp_filter_post_kses( $new_instance['text'] );
 }}}



 This allows users without the unfiltered_html capability the ability to
 add in simple html - links and such.

-- 
Ticket URL: <http://trac.mu.wordpress.org/ticket/1067>
WordPress MU Trac <http://mu.wordpress.org/>
WordPress Multiuser


More information about the wpmu-trac mailing list