wordpress update 6.6.2
This commit is contained in:
@@ -2980,6 +2980,12 @@ class WP_HTML_Tag_Processor {
|
||||
* @see https://html.spec.whatwg.org/#attributes-3
|
||||
*/
|
||||
$escaped_new_value = in_array( $comparable_name, wp_kses_uri_attributes() ) ? esc_url( $value ) : esc_attr( $value );
|
||||
|
||||
// If the escaping functions wiped out the update, reject it and indicate it was rejected.
|
||||
if ( '' === $escaped_new_value && '' !== $value ) {
|
||||
return false;
|
||||
}
|
||||
|
||||
$updated_attribute = "{$name}=\"{$escaped_new_value}\"";
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user