[wp-trac] [WordPress Trac] #62024: wp_kses_post incorrectly escapes "<" attributes values
WordPress Trac
noreply at wordpress.org
Wed Oct 1 11:26:27 UTC 2025
#62024: wp_kses_post incorrectly escapes "<" attributes values
--------------------------+-------------------------------
Reporter: jernstjernst | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Formatting | Version: 5.0
Severity: normal | Resolution:
Keywords: | Focuses: coding-standards
--------------------------+-------------------------------
Changes (by jonsurrell):
* version: 6.7 => 5.0
Comment:
[https://playground.wordpress.net/php-
playground.html#eyJjb2RlIjoiPD9waHBcbnJlcXVpcmUgJy93b3JkcHJlc3Mvd3AtbG9hZC5waHAnO1xuZWNobyBcIjxwbGFpbnRleHQ+XCI7XG5lY2hvIHdwX2tzZXNfcG9zdCgnPGRpdiBkYXRhLWF0dHI9XCI8XCI+Jmx0OzwvZGl2PicpOyIsInBocCI6IjguNCIsIndwIjoiNi4zIn0=
Here's a demo of the behavior.]
I've confirmed this behavior as of version 6.3, but I suspect it's been
around much longer. I'll set the version arbitrarily to 5.0.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/62024#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list