[wp-trac] [WordPress Trac] #43215: Allow wp_kses to pass allowed CSS properties

WordPress Trac noreply at wordpress.org
Mon Nov 11 16:59:12 UTC 2024


#43215: Allow wp_kses to pass allowed CSS properties
-----------------------------+------------------------------
 Reporter:  mclaurent        |       Owner:  (none)
     Type:  feature request  |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Security         |     Version:  4.9.2
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by davidbaumwaid):

 Currently, wp_kses does not allow you to define permitted CSS properties
 for specific elements or calls. Instead, attributes are permitted
 globally, and there's no built-in mechanism to specify styles as part of
 the associative array for each element in wp_kses. This results in a lack
 of fine-grained control, especially with the style attribute.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/43215#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list