[wp-trac] [WordPress Trac] #63724: HTML API: Reliably parse HTML attributes in `wp_kses_hair()`

WordPress Trac noreply at wordpress.org
Fri Jan 9 21:43:13 UTC 2026


#63724: HTML API: Reliably parse HTML attributes in `wp_kses_hair()`
-------------------------------------------------+-------------------------
 Reporter:  dmsnell                              |       Owner:  dmsnell
     Type:  enhancement                          |      Status:  assigned
 Priority:  normal                               |   Milestone:  7.0
Component:  HTML API                             |     Version:  6.9
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch has-unit-tests needs-      |     Focuses:
  refresh                                        |
-------------------------------------------------+-------------------------

Comment (by dmsnell):

 > What about just deprecating it and suggesting folks use the HTML API?

 I think it will take more time to eradicate its use from within Core. at
 that point I’m all for deprecating it. Until then, my take is that it’s
 worth improving the reliability. Some of the examples you shared highlight
 critical categories of inputs where Core is currently confused.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63724#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list