[wp-trac] Re: [WordPress Trac] #8767: Refactored filters to avoid potential XSS attacks

WordPress Trac wp-trac at lists.automattic.com
Fri Jan 2 23:28:46 GMT 2009


#8767: Refactored filters to avoid potential XSS attacks
-------------------------------------------+--------------------------------
 Reporter:  sambauers                      |        Owner:  ryan 
     Type:  defect (bug)                   |       Status:  new  
 Priority:  high                           |    Milestone:  2.7.1
Component:  Security                       |      Version:  2.7  
 Severity:  major                          |   Resolution:       
 Keywords:  has-patch, needs-testing, XSS  |  
-------------------------------------------+--------------------------------
Comment (by miqrogroove):

 I'm also concerned about the return ''; statements.  This is not typical
 of UTF-8 sanitizers.

 With only a week to go now, I think this patch is more likely to introduce
 new problems than improve risk factors.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/8767#comment:3>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list