Skip to content

KSES: Reimplement with Tag Processor #13271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dmsnell wants to merge 17 commits into
base: trunk
Choose a base branch
from
Open

KSES: Reimplement with Tag Processor #13271

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
c563b48
Escape syntax characters in RCDATA
dmsnell Aug 29, 2026
d5a9612
KSES: Reimplement with Tag Processor
dmsnell Aug 25, 2026
21b3ada
Cast inputs to string
dmsnell Aug 25, 2026
41be8d0
Do not escape quote characters (match legacy behavior).
dmsnell Aug 25, 2026
d76d9d6
Preserve `wp_kses()` comment-content corruption defect.
dmsnell Aug 28, 2026
f6bf075
Process required attributes after validation; they aren’t present if …
dmsnell Aug 26, 2026
dcf9630
Remove unwanted C0 characters from text nodes.
dmsnell Aug 26, 2026
5da1737
Undo http:// prefix on no-path-separator URLs
dmsnell Aug 26, 2026
5b9d123
Use the HTML Processor for SVG and overall better parsing.
dmsnell Aug 27, 2026
d8ea75a
Trim virtual-only elements at end of input.
dmsnell Aug 29, 2026
1412931
Update tests to reflect HTML parsing standards.
dmsnell Aug 25, 2026
3dfc339
Because the title was emptied, the post update failed entirely, leavi…
dmsnell Aug 26, 2026
c2dd3b4
Tests: CSS should convey the given values, even if it corrupts the CSS.
dmsnell Aug 28, 2026
93ef913
WidgetMediaImage test spec compliance
dmsnell Aug 26, 2026
cfcd133
There are no self-closing HTML elements. (OBJECT)
dmsnell Aug 26, 2026
9ff786a
Update tests for HTML Processor normalization
dmsnell Aug 28, 2026
bdbae3a
Remove early-abort for missing required attributes.
dmsnell Aug 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/wp-includes/html-api/class-wp-html-processor.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -896,7 +896,7 @@ public function is_tag_closer(): bool {
*
* @return bool Whether the current token is virtual.
*/
private function is_virtual(): bool {
protected function is_virtual(): bool {
return (
isset( $this->current_element->provenance ) &&
'virtual' === $this->current_element->provenance
Expand Down
11 changes: 11 additions & 0 deletions src/wp-includes/html-api/class-wp-html-tag-processor.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4161,6 +4161,17 @@ static function ( $tag_match ) {

case 'TEXTAREA':
case 'TITLE':
$plaintext_content = strtr(
$plaintext_content,
array(
'<' => '&lt;',
'>' => '&gt;',
'&' => '&amp;',
'"' => '&quot;',
"'" => '&apos;',
)
);

$plaintext_content = preg_replace_callback(
"~</(?P<TAG_NAME>{$this->get_tag()})~i",
static function ( $tag_match ) {
Expand Down
Loading
Loading