[wp-trac] [WordPress Trac] #61827: wp_check_comment_disallowed_list() can't be used to match unprocessed HTML

WordPress Trac noreply at wordpress.org
Tue Oct 22 12:00:35 UTC 2024


#61827: wp_check_comment_disallowed_list() can't be used to match unprocessed HTML
--------------------------------------+-----------------------------
 Reporter:  cfinke                    |       Owner:  SergeyBiryukov
     Type:  defect (bug)              |      Status:  reopened
 Priority:  normal                    |   Milestone:  6.7
Component:  Comments                  |     Version:  6.6.1
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:
--------------------------------------+-----------------------------
Changes (by david.binda):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 Sorry for re-opening, however, while testing the r59267 I've noticed a
 possible regression caused by the changeset.

 As the `wp_allow_comment` is now triggered twice, the
 `check_comment_flood` action is also triggered twice, which might lead to
 false-positive identification of comment flood in case there is some
 custom callback hooked to it, which is not expecting identical data seeing
 twice.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/61827#comment:12>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list