[wp-trac] [WordPress Trac] #62024: wp_kses_post incorrectly escapes "<" attributes values

WordPress Trac noreply at wordpress.org
Wed Oct 1 11:26:27 UTC 2025


#62024: wp_kses_post incorrectly escapes "<" attributes values
--------------------------+-------------------------------
 Reporter:  jernstjernst  |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Formatting    |     Version:  5.0
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:  coding-standards
--------------------------+-------------------------------
Changes (by jonsurrell):

 * version:  6.7 => 5.0


Comment:

 [https://playground.wordpress.net/php-
 playground.html#eyJjb2RlIjoiPD9waHBcbnJlcXVpcmUgJy93b3JkcHJlc3Mvd3AtbG9hZC5waHAnO1xuZWNobyBcIjxwbGFpbnRleHQ+XCI7XG5lY2hvIHdwX2tzZXNfcG9zdCgnPGRpdiBkYXRhLWF0dHI9XCI8XCI+Jmx0OzwvZGl2PicpOyIsInBocCI6IjguNCIsIndwIjoiNi4zIn0=
 Here's a demo of the behavior.]

 I've confirmed this behavior as of version 6.3, but I suspect it's been
 around much longer. I'll set the version arbitrarily to 5.0.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62024#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list