WordPress 2.0 introduced some sophisticated HTML inspecting and de-linting courtesy of kses.
kses is an HTML/XHTML filter written in PHP. It removes all unwanted HTML elements and attributes, and it also does several checks on attribute values. kses can be used to avoid Cross-Site Scripting (XSS), Buffer Overflows and Denial of Service attacks.
It’s a good addition, but it was also removing the class names from some of the elements of my posts. The result is that the following structured XHTML was coming through without any structure.
<ul class=“fullrecord”>
<li class=“title”><h3>Title</h3>
<ul>
<li>The Effects Of A Modified Ball In Developing The Volleyball Pass And Set For High School Students</li>
</ul>
</li>
<li class=“attribution”>...
Without the semantic value of the classnames, the XHTML loses all the microformatting, making it not only less re-usable/remixable but also harder to style.
<ul>
<li><h3>Title</h3>
<ul>
<li>The Effects Of A Modified Ball In Developing The Volleyball Pass And Set For High School Students</li>
</ul>
</li>
<li>...
A WordPress form post pointed me to the includes/kses.php file, where the $allowedposttags array set the standards for the acceptable tags and attributes. It begins like this:
$allowedposttags = array ('address' => array (), 'a' => array ('href' => array (), 'title' => array (), 'rel' => array ()...
It’s a hack, but changing the entries for some of the tags got me through.
'ul' => array ('class' => array())
WordPress, strip tags, kses, code, fix, hack, class names, semantic markup
Posted May 15, 2007 by Casey Bisson
Categories: Technology. Tags: class names, code, fix, hack, kses, semantic markup, strip tags, wordpress.
6 Comments
Comments RSS
TrackBack Identifier URI
User contributed tags for this post:
wordpress kses (39) - php filter (17) - wordpress strip html (15) - Wordpress strips html (12) - Wordpress stripping HTML (11) - wordpress allowedposttags (10) - wordpress strips css (10) - wordpress (9) - kses wordpress (8) - wordpress strips code (8) - wordpress strip tags (8) - class (7) - wordpress xmlrpc strip tags (7) - wordpress strip (6) - wordpress strips classes (5) - allowedposttags (5) - wordpress avoid strip tag (5) - wordpress strip style tag (4) - allowedposttags style (4) - wordpress $allowedposttags (4) - wordpress removes html (4) - wordpress strips tags (3) - php strip tags hack (3) - kses.php wordpress (3) - kses buffer wordpress (3) - wordpress removing style attribute (3) - wordpress delete pre attributes (3) - wordpress strips HTML from comments (3) - php strip html attributes (3) - wordpress kses plugin (3) - wordpress strips a (3) - wordpress kses.php (3) - wordpress kses style (3) - wordpress strips (3) - wordpress stripping CSS (3) - wordpress strips style attribute (2) - wordpress strip tags rss feed (2) - wordpress stripping form (2) - wordpress KSES -MU (2) - wordpress code stripping form (2) - wordpress strip class (2) - wordpress post by email a href (2) - wordpress strips style (2) - using strip tags in wordpress (2) - wordpress kses disable (2) - wordpress class (2) - replacing kses.php fixed the problem (2) - wordpress archive strips out html (2) - wordpress stripping tags (2) - wordpress mu strip html (2) - wordpress filter kses (2) - wpmu $allowedposttags (2) - wordpress mu html filter (2) - wordpress removes IDs and classes (2) - wordpress stripping classes (2) - kses html wordpress (2) - xml-rpc stripping < (2) - php strip attributes (2) - wordpress html filter (2) - wordpress strip word markup (2) - Wordpress removes attribute tag xmlrpc (2) - wordpress strips (2) - wordpress remove html tags (2) - wordpress editor strip html (2) - wordpress strip post words (2) - wordpress strips css classes (2) - wordpress strip html fix bug (2) - html striping wordpress (2) - wordpress strip style tags (2) - wordpress rss strips html (2) - kses.php CSS (2) - wordpress strips class tags (2) - wordpress strips class (2) - wordpress classes (2) - wordpress strips my HTML (2) - strip css tags (2) - wordpress stripping classes from tags (2) - kses plugin (2) - wordpress kses fix (2) - word press strips tags (2) - wordpress strips html tags (2) - kses (2) - wordpress feed strips html (2) - wordpress html filter pre name attribute (2) - wordpress stripping tags fix (2) - strip word markup wordpress (2) - wordpress.org kses (2) - wordpress plugin strip tags (2) - wordpress strips class attributes (2) - wordpress striptags (2) - F (2) - wordpress remove html from post (1) - strip word tags (1) - wordpress stripc pre attributes (1) - wordpress strips
So this is why WP stripped out so many classes and IDs when I switched platforms and imported my old MT posts? Good to know. Man, that pissed me off, but by the time I’d realized what happened it seemed too late to go back and try again. Besides, I had no idea how to fix it.
Yeah, it’s pretty frustrating when you don’t know what’s going on. And only a little less frustrating once you do.
Still, it helps those who don’t know what they’re doing (and those who do, but have malicious intent) from breaking things.
Wordpress should replaces their kses code with the code used in this modified version of kses — http://sourceforge.net/tracker/index.php?func=detail&aid=1752954&group_id=81853&atid=564260
The modified kses produces better HTML, fixes bugs, allows CSS usage, etc.
woo hooo. that totally worked!
[...] and Flash embeds. This would be fine if it were configurable, but sadly it is not. Various hacks exist to remedy the situation, but for such a pluggable piece of software as WordPress – hacks just seem [...]
[...] in my span HTML elements. To fix the problem, I followed the trail of references leading from » WordPress Strips Classnames, And How To Fix It MaisonBisson.com. I learned that WordPress uses the kses PHP library to filter HTML of possibly invalid and [...]