[wp-trac] Re: [WordPress Trac] #8767: Refactored filters to avoid
potential XSS attacks
WordPress Trac
wp-trac at lists.automattic.com
Mon Jan 5 22:15:03 GMT 2009
#8767: Refactored filters to avoid potential XSS attacks
-------------------------------------------+--------------------------------
Reporter: sambauers | Owner: ryan
Type: defect (bug) | Status: new
Priority: high | Milestone: 2.7.1
Component: Security | Version: 2.7
Severity: major | Resolution:
Keywords: has-patch, needs-testing, XSS |
-------------------------------------------+--------------------------------
Comment (by sambauers):
Replying to [comment:14 link92]:
> Off the top of my head, any PCRE just silently fails to match anything,
which without iconv would make this patch a huge void hole.
Yes, for those cases, but there is still a majority of cases where this
will enhance security.
--
Ticket URL: <http://trac.wordpress.org/ticket/8767#comment:15>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list