Repository navigation
Commit be94129
committed
KSES: Allow functional CSS values in inline styles.
The presentation properties allowlisted in [62530] were accepted in name only: any declaration whose value contained a function call was dropped in full, so for users without the `unfiltered_html` capability those properties remained unusable in their canonical form. URL references are routed through the existing protocol validation, so the security model is unchanged.
Developed in: WordPress/wordpress-develop#12942
Follow-up to [62530].
Props courane01, hasnainashfaq, irozum, khokansardar, mdridipu, tyxla.
Fixes #65832.
Built from https://develop.svn.wordpress.org/trunk@63180
git-svn-id: http://core.svn.wordpress.org/trunk@62377 1a063a9b-81f0-0310-95a4-ce76da25c4cd1 parent 0246354 commit be94129
2 files changed
Lines changed: 25 additions & 2 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2638 | 2638 | | |
2639 | 2639 | | |
2640 | 2640 | | |
| 2641 | + | |
| 2642 | + | |
2641 | 2643 | | |
2642 | 2644 | | |
2643 | 2645 | | |
| |||
2906 | 2908 | | |
2907 | 2909 | | |
2908 | 2910 | | |
| 2911 | + | |
| 2912 | + | |
| 2913 | + | |
| 2914 | + | |
| 2915 | + | |
| 2916 | + | |
| 2917 | + | |
| 2918 | + | |
| 2919 | + | |
| 2920 | + | |
2909 | 2921 | | |
2910 | 2922 | | |
2911 | 2923 | | |
| |||
3004 | 3016 | | |
3005 | 3017 | | |
3006 | 3018 | | |
3007 | | - | |
| 3019 | + | |
| 3020 | + | |
| 3021 | + | |
| 3022 | + | |
| 3023 | + | |
| 3024 | + | |
| 3025 | + | |
| 3026 | + | |
| 3027 | + | |
| 3028 | + | |
| 3029 | + | |
| 3030 | + | |
3008 | 3031 | | |
3009 | 3032 | | |
3010 | 3033 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
16 | 16 | | |
17 | 17 | | |
18 | 18 | | |
19 | | - | |
| 19 | + | |
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
| |||
0 commit comments