prevent xss filter html usage / allowed html tags

[sinanisler]

prevent xss filter html usage

// Create function which allows more tags within comments
function filter_html_usage() {
  global $allowedtags;
  $allowedtags['pre'] = array('class'=>array());
  $allowedtags['p'] = array('class'=>array());
  $allowedtags['code'] = array('class'=>array());
  $allowedtags['strong'] = array('class'=>array());
  $allowedtags['href'] = array('class'=>array());
}
 
// Add WordPress hook to use the function
add_action('init', 'filter_html_usage',11);

[sinanisler]

@serkanalgur is this good or we should use a better way?

I tested it with the <script> tag it works.

SiForum/functions.php

Lines 53 to 76 in ce84b74

	function filter_html_usage() {
	global $allowedtags;
	$allowedtags['code'] = array('class'=>array());
	$allowedtags['pre'] = array('class'=>array());
	$allowedtags['p'] = array('class'=>array());
	$allowedtags['strong'] = array('class'=>array());
	$allowedtags['href'] = array('class'=>array());
	$allowedtags['a'] = array('class'=>array());
	$allowedtags['ul'] = array('class'=>array());
	$allowedtags['li'] = array('class'=>array());
	$allowedtags['i'] = array('class'=>array());
	$allowedtags['h1'] = array('class'=>array());
	$allowedtags['h2'] = array('class'=>array());
	$allowedtags['h3'] = array('class'=>array());
	$allowedtags['b'] = array('class'=>array());
	$allowedtags['abbr'] = array('class'=>array());
	$allowedtags['acronym'] = array('class'=>array());
	$allowedtags['blockquote'] = array('class'=>array());
	$allowedtags['cite'] = array('class'=>array());
	$allowedtags['em'] = array('class'=>array());
	}
	// Add WordPress hook to use the function
	add_action('init', 'filter_html_usage',11);