[wp-trac] [WordPress Trac] #46197: safecss_filter_attr remove styles with calc()

WordPress Trac noreply at wordpress.org
Wed Feb 6 16:17:37 UTC 2019


#46197: safecss_filter_attr remove styles with calc()
--------------------------+------------------------------
 Reporter:  displaynone   |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by joyously):

 There are quite a few valid things that would get removed. Gradients and
 filters and `var` can also have parentheses, not to mention data URIs or
 `content` values.

 But what is odd is that the $allowed_attr is filtered, and if empty, no
 other change is made to the $css. Only if it has something is the $css
 further manipulated. This seems backward.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/46197#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list