There are no signs that this was accidental or a bug, and has been in core for many years. This is because of this set of lines at the end of the main loop of safecss_filter_attr
:
// Only add the CSS part if it passes the regex check.
if ( $allow_css ) {
if ( '' !== $css ) {
$css .= ';';
}
$css .= $css_item;
}
The root of the question is a broken assumption that wp_kses
modifies the original HTML string, which is not the case.
Instead, wp_kses
uses regular expressions to break apart your HTML into arrays which are then further subdivided by more regular expressions. It’s these arrays that are then going to be processed to remove attributes and tags etc. Then these are reassembled to create a brand new HTML string.
Related Posts:
- How to check if a string is a valid URL
- What is the best practice for escaping data URIs?
- Shortcode putting html such as
- Proper use of internationalization
- Validate Uploaded Image using WordPress’ Built-in Functions?
- Settings API – sanitize_callback is not called and it leads to an incorrect behavior
- wp_kses and magic quotes
- How to remove role=”navigation” from all nav elements?
- What esc_ to use to validate this?
- Sanitizing text fields in array
- register_setting & add_settings_error validation issues with multiple fields
- Broken kses.php function “wp_kses_named_entities” crashes WordPress
- WordPressUser Submission Form
- Contact form – problem with displaying message about sent mail
- Contact Form 7 WordPress, checking a few fields, if empty then invalid
- Custom HTML form using PHP – help with ajax/username validation
- WP Debug enabled Undefined index error in a widget
- Custom Registration and Login Forms with reCaptcha 2 Validation
- oneOf JSON Schema validation not properly working for custom post meta value?
- Does it make sense to sanitize the output of an SVG file?
- Validate a custom form with js and php
- Making your own custom post views count
- Save Custom CSS file in the upload folder dynamically?
- How to use two meta_compare in an array?
- How to update and save user metadata on page visits?
- Verify if a category is the child of another category
- How to remap one of the TinyMCE Advanced Editor button to open the wordpress media library?
- Simple AJAX notification when the new post is added to the database
- How to optimize update_post_meta?
- Warning: in_array() null given in PHP function
- Contact Form 7 – Replace database configured form template with a static file
- AJAX wp_insert_user WORKS but responds with “The site is not enabled”
- Why can’t I return a value from $wpdb->get var?
- How to get User Time Zone in WordPress?
- How to hook a logout funtion for specific usr role in wordpress?
- Redirection after submitting duplicate comment
- Convert code – not work
- Fix error Gravatar alt
- HTML Special Characters in URL string [closed]
- how to save checkbox data for custom setting?
- How to remove sidebar primary widget on Mobile on category page [closed]
- How to keep the capability of users and disable Gutenberg editor in WordPress?
- Upload multiple files in randomly generated folder using wp_upload_bits
- Is it possible to change content in my PHP file from WordPress dashboard
- ACF put a comma after the last repeater field value [closed]
- Create page template via functions.php?
- Loading two post layouts for the same post with different url
- Code snippet to show current php version inside “At a Glance” box in admin
- parsing nested blocks (in columns, etc) via PHP
- Show ACF field with link to ultimate member profile/WordPress user profile below the post (single post layout)
- getting url from variable that calls picture of current page, not working. Only displays everything instead of url
- How to upload WP user avatar on woocommerce account page [closed]
- Use post ID in functions.php file adminside
- How to show childs of certain custom post type in option list?
- Short code template + ajax
- str_replace with the_content is not working
- How do I populate custom field with current user role in Woocommerce [closed]
- WPML best page selector with php
- How to disable send e-mail notification new comments for some posts
- trying to put an active hover to my custom nav category buttons [closed]
- How to edit HTML of my website on WordPress? [closed]
- Redirect first comment (Thanks for comment) with show Autor name and beginning of the comment
- Large WordPress CRON job
- Fixing Deprecated: get_the_author_lastname
- WordPress query undefined offset in loop
- Referencing Images in javascript to display on wordpress page
- Most commented posts by time period (last 12h, last 24h and etc)
- How to: Conditionally Enqueue JS and Stylesheets, for Custom Post Type (Single and Archive Templates)
- Divi change project category slug
- Add meta tags to a custom header
- Ajax filter button display all posts
- Check If Post Was Published More Than 6 Months Ago Using get_the_date
- Where are the src and srcset sizes coming from?
- What is the right way to add PHP code to a certain part of a page
- wp_remote_post empty $_POST
- PHP code for displaying WordPress posts in a static page not working
- How to add PHP code in functions.php wordpress
- WordPress hit memory limit but not from the server
- How can I spin up a new website for a registered user automatically?
- How to override url params with rewrite rules vars?
- WordPress wp-admin redirect and exception
- Can I make get_users() query global?
- Using Argument from Function to Re-Direct Visitor (WordPress)
- Use $wpdb or other PHP script method to find/replace in WP database
- Add product to cart for user – WC()->cart->add_to_cart [closed]
- What is the alternative code to if (isset ($_POST) && !empty ($_POST) to avoid warnings?
- preg_replace regex problem
- Compare $_POST returned values with term array
- Remove item in Checkout
- email alert for product availability
- How to Update post_modified of all wordpress post
- How to Change CSS Colors from Custom Plugin Settings Page
- malware undetectable by multiple scans
- how to serialize() mysql update data
- Simple WordPress endpoint route doesn’t work
- Correct PHP to output a single result of a Function with SQL Query
- How to relocate paypal button gateway on checkout page in woocommerce
- How to create a field in customize and show that in header.php?
- WordPress shortcode returns the data before
- Passing the name of selected color from the custom component to `render_callback`