From e1966f061dfb33f9f6dbdcad66bd2b3e40838f1f Mon Sep 17 00:00:00 2001 From: Konstantin Kovshenin Date: Sun, 6 Dec 2015 20:29:25 +0000 Subject: [PATCH] Allow usage of angle brackets in a site title or tagline. The whole string is escaped with `esc_html()` anyway, so we don't need to `wp_kses_post()`. This is a better experience for users who want to use angle brackets in their site title or description. Does not allow any HTML, adds unit tests. props BandonRandon, pauldewouters. fixes #27942. Built from https://develop.svn.wordpress.org/trunk@35788 git-svn-id: http://core.svn.wordpress.org/trunk@35752 1a063a9b-81f0-0310-95a4-ce76da25c4cd --- wp-includes/formatting.php | 1 - wp-includes/version.php | 2 +- 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/wp-includes/formatting.php b/wp-includes/formatting.php index 5261acb75e..3ad0d37ef2 100644 --- a/wp-includes/formatting.php +++ b/wp-includes/formatting.php @@ -3706,7 +3706,6 @@ function sanitize_option( $option, $value ) { if ( is_wp_error( $value ) ) { $error = $value->get_error_message(); } else { - $value = wp_kses_post( $value ); $value = esc_html( $value ); } break; diff --git a/wp-includes/version.php b/wp-includes/version.php index 01ae5edb2e..52484633c3 100644 --- a/wp-includes/version.php +++ b/wp-includes/version.php @@ -4,7 +4,7 @@ * * @global string $wp_version */ -$wp_version = '4.5-alpha-35787'; +$wp_version = '4.5-alpha-35788'; /** * Holds the WordPress DB revision, increments when changes are made to the WordPress DB schema.