jonsurrell d4a1644618 HTML API: Prevent adding dangerous double-escape SCRIPT contents. ...

Prevent WP_Tag_Processor::set_modifiable_text() from allowing SCRIPT contents with "<script" like it does with "</script". Either of these sequences may affect the script element's close.

Developed in https://github.com/WordPress/wordpress-develop/pull/9560.

Props jonsurrell, westonruter, dmsnell.
See #63738.

Built from https://develop.svn.wordpress.org/trunk@60706


git-svn-id: http://core.svn.wordpress.org/trunk@60042 1a063a9b-81f0-0310-95a4-ce76da25c4cd

2025-09-04 14:40:27 +00:00

..

class-wp-html-active-formatting-elements.php

HTML API: Add missing tags in IN BODY insertion mode to HTML Processor.

2024-07-22 22:24:15 +00:00

class-wp-html-attribute-token.php

…

class-wp-html-decoder.php

HTML API: Add missing @global tag on HTML Decoder.

2024-09-02 20:55:14 +00:00

class-wp-html-doctype-info.php

HTML API: Fix typo in indicated_compatibility_mode.

2025-08-19 15:08:31 +00:00

class-wp-html-open-elements.php

HTML API: Ensure that full processor can seek to earlier bookmarks.

2024-11-12 10:32:17 +00:00

class-wp-html-processor-state.php

HTML API: Remove unused processor state context_node property

2024-11-27 09:54:17 +00:00

class-wp-html-processor.php

HTML API: Fix typo in indicated_compatibility_mode.

2025-08-19 15:08:31 +00:00

class-wp-html-span.php

HTML API: Add PHP type annotations.

2024-07-19 23:44:16 +00:00

class-wp-html-stack-event.php

HTML API: Add PHP type annotations.

2024-07-19 23:44:16 +00:00

class-wp-html-tag-processor.php

HTML API: Prevent adding dangerous double-escape SCRIPT contents.

2025-09-04 14:40:27 +00:00

class-wp-html-text-replacement.php

HTML API: Add PHP type annotations.

2024-07-19 23:44:16 +00:00

class-wp-html-token.php

HTML API: Add support for SVG and MathML (Foreign content)

2024-08-08 07:25:15 +00:00

class-wp-html-unsupported-exception.php

HTML API: Add context to Unsupported_Exception class for improved debugging.

2024-07-12 22:29:13 +00:00

html5-named-character-references.php

Introduce Token Map: An optimized static translation class.

2024-05-23 19:56:08 +00:00