diff --git a/src/wp-includes/kses.php b/src/wp-includes/kses.php index 300376197a..6bc1d005ba 100644 --- a/src/wp-includes/kses.php +++ b/src/wp-includes/kses.php @@ -1452,9 +1452,9 @@ function wp_kses_hair_parse( $attr ) { // phpcs:disable Squiz.Strings.ConcatenationSpacing.PaddingFound -- don't remove regex indentation $regex = '(?:' - . '[_a-zA-Z][-_a-zA-Z0-9:.]*' // Attribute name. + . '[_a-zA-Z][-_a-zA-Z0-9:.]*' // Attribute name. . '|' - . '\[\[?[^\[\]]+\]\]?' // Shortcode in the name position implies unfiltered_html. + . '\[\[?[^\[\]]+\]\]?' // Shortcode in the name position implies unfiltered_html. . ')' . '(?:' // Attribute value. . '\s*=\s*' // All values begin with '='. diff --git a/tests/phpunit/tests/kses.php b/tests/phpunit/tests/kses.php index deda0c8cef..3bf747ca40 100644 --- a/tests/phpunit/tests/kses.php +++ b/tests/phpunit/tests/kses.php @@ -629,22 +629,22 @@ EOF; "array[1]='z'z'z'z", false, ), - // using digit in attribute name should work + // Using a digit in attribute name should work. array( 'href="https://example.com/[shortcode attr=\'value\']" data-op3-timer-seconds="0"', array( 'href="https://example.com/[shortcode attr=\'value\']" ', 'data-op3-timer-seconds="0"' ), ), - // using underscore in attribute name should work + // Using an underscore in attribute name should work. array( 'href="https://example.com/[shortcode attr=\'value\']" data-op_timer-seconds="0"', array( 'href="https://example.com/[shortcode attr=\'value\']" ', 'data-op_timer-seconds="0"' ), ), - // using period in attribute name should work + // Using a period in attribute name should work. array( 'href="https://example.com/[shortcode attr=\'value\']" data-op.timer-seconds="0"', array( 'href="https://example.com/[shortcode attr=\'value\']" ', 'data-op.timer-seconds="0"' ), ), - // using digit at a beginning of attribute name should return false + // Using a digit at the beginning of attribute name should return false. array( 'href="https://example.com/[shortcode attr=\'value\']" 3data-op-timer-seconds="0"', false,