diff --git a/wp-includes/functions-post.php b/wp-includes/functions-post.php index 842980f6c2..e9319ba966 100644 --- a/wp-includes/functions-post.php +++ b/wp-includes/functions-post.php @@ -643,6 +643,8 @@ function wp_blacklist_check($author, $email, $url, $comment, $user_ip, $user_age if ( preg_match_all('/&#(\d+);/', $comment . $author . $url, $chars) ) { foreach ($chars[1] as $char) { // If it's an encoded char in the normal ASCII set, reject + if ( 38 == $char ) + continue; // Unless it's & if ($char < 128) return true; }