sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Backtick-escape three sets of HTML entities used in DocBlock descriptions in wp-includes/kses.php.

Browse Source 
Without the escaping, the Code Reference/browser may inadvertently attempt to convert and display entities.

Fixes #30473.


git-svn-id: https://develop.svn.wordpress.org/trunk@30720 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Drew Jaynes (DrewAPicture) 2014-12-03 08:46:31 +00:00
parent 6213bb9689
commit bf8544d9fa
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/wp-includes/kses.php
View File

@ -1172,8 +1172,8 @@ function wp_kses_bad_protocol_once2( $string, $allowed_protocols ) {
/**
* Converts and fixes HTML entities.
*
* This function normalizes HTML entities. It will convert "AT&T" to the correct
* "AT&T", ":" to ":", "&#XYZZY;" to "&#XYZZY;" and so on.
* This function normalizes HTML entities. It will convert `AT&T` to the correct
* `AT&T", ":" to ":", "&#XYZZY;" to "&#XYZZY;` and so on.
*
* @since 1.0.0
*
@ -1218,8 +1218,8 @@ function wp_kses_named_entities($matches) {
/**
* Callback for wp_kses_normalize_entities() regular expression.
*
* This function helps wp_kses_normalize_entities() to only accept 16-bit values
* and nothing more for &#number; entities.
* This function helps {@see wp_kses_normalize_entities()} to only accept 16-bit
* values and nothing more for `&#number;` entities.
*
* @access private
* @since 1.0.0
@ -1277,9 +1277,9 @@ function valid_unicode($i) {
/**
* Convert all entities to their character counterparts.
*
* This function decodes numeric HTML entities (A and A). It doesn't do
* anything with other entities like ä, but we don't need them in the URL
* protocol whitelisting system anyway.
* This function decodes numeric HTML entities (`A` and `A`).
* It doesn't do anything with other entities like ä, but we don't
* need them in the URL protocol whitelisting system anyway.
*
* @since 1.0.0
*