[wp-trac] [WordPress Trac] #43215: Allow wp_kses to pass allowed CSS properties

WordPress Trac noreply at wordpress.org
Sat Nov 8 18:09:58 UTC 2025


#43215: Allow wp_kses to pass allowed CSS properties
-----------------------------+------------------------------
 Reporter:  mclaurent        |       Owner:  (none)
     Type:  feature request  |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Security         |     Version:  4.9.2
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by sarapalmer2352):

 wp_kses takes arguments for allowed HTML elements, HTML element
 attributes, and allowed protocols. It takes all of these directly via the
 function argument through a nicely formatted assoc array. On the side
 side, attribute values (i.e. "display: block; visibility: hidden;") are
 configured via a hook, which means they are changed globally for all
 future calls.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/43215#comment:14>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list