The wp-kses tag has no wiki summary.
4
votes
1answer
78 views
Allowing more elements in comments via functions.php
I would like to allow certain HTML elements in my comments and have edited kses.php directly in the past.
However, I have been hacked recently and replaced all the core Wordpress files and feel I ...
3
votes
1answer
449 views
What is the difference between strip_tags and wp_filter_nohtml_kses?
What is the difference between strip_tags and wp_filter_nohtml_kses. I tried to figure wp_filter_nohtml_kses from the source but it looks like it does something a bit more complex than strip all html ...
3
votes
2answers
346 views
WP Editor strips input placeholder attribute
Why WP Editor also strips the "placeholder" attribute of the input text element ?
Ofcourse, i am using the HTML mode.
Here is the input:
<input type="text" value="" name="s" style="width: 550px;" ...
1
vote
4answers
627 views
Typical wp_kses $allowed
I have a custom post textbox that I want to sanitize using wp_kses before I update my post meta.
I was looking for examples of common $allowed settings, but I have only seen this example:
$allowed = ...
1
vote
1answer
51 views
Make WordPress process admin group comments using $allowedtags
WP uses $allowedtags to limit the set of allowable tags for comments.However, comments from administrators are unfiltered.
What's the easiest way to ensure admin comments are also constrained to the ...
1
vote
0answers
44 views
Only allow site url in text field using wp_kses/wp_filter_nohtml_kses?
I'm working on validation for a theme options page.
Is there a built in way to add an argument to wp_kses/wp_filter_nohtml_kses that will allow a specific link to be entered(wrapped in a tags) but ...
0
votes
2answers
360 views
sanitize vimeo embed code?
I have a custom meta box with a textarea where users can drop in vimeo embed code.
Should I sanitize this code before I update_post_meta, and, if so, how should I go about it? I don't want to strip ...
0
votes
1answer
49 views
Why is `--` converted into ndash and how can I get rid of it?
I have a blog where I publish Linux tutorials. Some of the commands I listed have a -- before command-line arguments. e.g.: dpkg --get-selections.
The problem is that WordPress automatically switches ...
