Repository navigation

Icons Registry: improve SVG sanitizer - #75550

Open

t-hamano wants to merge 55 commits into

trunkfrom

icon-registry-sanitizer

Open

Icons Registry: improve SVG sanitizer#75550
t-hamano wants to merge 55 commits into
trunkfrom
icon-registry-sanitizer

Commits on Mar 12, 2026
- Icons Regstry: improveme SVG sanitizer
  t-hamano
  committed
  26a51db
- WIP
  t-hamano
  committed
  4ae7479
- Improve unit test
  t-hamano
  committed
  a777fff
- Format
  t-hamano
  committed
  2bd0b84
- Add missing elements
  t-hamano
  committed
  3dc5e28
- Remove redundant def element
  t-hamano
  committed
  8708824
- Add temporary backport changelog
  t-hamano
  committed
  5c36d1f
Commits on Jun 15, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  
  t-hamano
  and
  claude
  committed
  e8f8a31
- Consolidate icon registry sanitize tests into a single test file
  
  t-hamano
  and
  claude
  committed
  d4f4022
- Reject malformed SVG when the processor errors or pauses incomplete
  
  t-hamano
  and
  claude
  committed
  06dbc86
- Branch xmlns:xlink test expectation by WordPress version
  
  t-hamano
  and
  claude
  committed
  ae4140d
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  authored
  49f6a74
- Allow all ARIA states/properties and data-* attributes in icon SVGs
  
  t-hamano
  and
  claude
  committed
  c360d0c
Commits on Jun 17, 2026
- Add type hints to sanitize_icon_content()
  
  t-hamano
  and
  claude
  committed
  d5c5967
- Use array_fill_keys() for SVG attribute allow-lists
  
  t-hamano
  and
  claude
  committed
  5a99e53
- Use @link tag for dmsnell PR reference in docblock
  
  t-hamano
  and
  claude
  committed
  97d3002
- Skip leading comments and XML declarations before the SVG element
  
  t-hamano
  and
  claude
  committed
  39deef1
- Return null from sanitize_icon_content() on failure
  
  t-hamano
  and
  claude
  committed
  29eca95
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  authored
  dc2ab15
- Drop parameter type hint to stay compatible with the parent signature
  
  t-hamano
  and
  claude
  committed
  0993ad8
- Revert "Return null from sanitize_icon_content() on failure"
  
  t-hamano
  and
  claude
  committed
  a46f913
- Use array_fill_keys() for the remaining SVG attribute lists
  
  t-hamano
  and
  claude
  committed
  cf0d2a3
- Add backport changelog
  t-hamano
  committed
  c7ff855
- Rename backport changelog file to match its PR number
  t-hamano
  committed
  d3ee803
- Skip ReflectionMethod::setAccessible() on PHP 8.1+
  t-hamano
  committed
  381209c
Commits on Jun 19, 2026
- Use @link for WAI-ARIA spec reference in sanitize_icon_content()
  
  t-hamano
  and
  claude
  committed
  20abfeb
- Use @link for Trac changeset reference in icons registry test
  
  t-hamano
  and
  claude
  committed
  33f767d
- Sort SVG sanitizer attribute lists alphabetically
  
  t-hamano
  and
  claude
  committed
  5b2e3d4
- Extract get_allowed_attribute_list() helper to build kses attribute lists
  
  t-hamano
  and
  claude
  committed
  e39539b
Commits on Jun 22, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  committed
  c7a1947
- Fix incorrect PHPDoc tags
  
  t-hamano
  and
  westonruter
  authored
  b88395f
- Resolve leftover merge conflict in icons registry test
  
  t-hamano
  and
  claude
  committed
  1fe8e6c
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  authored
  0c76fa6
Commits on Jun 23, 2026
- Icons: Reject foreign-namespaced <svg> in sanitizer
  
  t-hamano
  and
  claude
  committed
  f203e7d
- Icons: Relax SVG extraction but reject multiple roots
  
  t-hamano
  and
  claude
  committed
  f4c78d9
Commits on Jun 26, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  authored
  de4e098
Commits on Jul 1, 2026
- Merge remote-tracking branch 'origin/trunk' into icon-registry-sanitizer
  t-hamano
  committed
  a3b0fac
Commits on Jul 8, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  authored
  711128d
- Icons Registry: rename sanitizer to sanitize_inline_svg and clarify contract
  
  t-hamano
  and
  claude
  committed
  abb6f73
- Icons Registry: document why truncated SVG input is rejected
  
  t-hamano
  and
  claude
  committed
  9f0c80f
Commits on Jul 28, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  committed
  b4b7ebc
Commits on Aug 1, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  committed
  42fe41c
- Icons: Clarify expected input of sanitize_inline_svg()
  
  t-hamano
  and
  claude
  committed
  6ddec02
- Icons: Protocol-check xlink:href during SVG sanitization
  
  t-hamano
  and
  claude
  committed
  a57e993
- Icons: Disallow the SMIL animate and set elements
  
  t-hamano
  and
  claude
  committed
  e43b7a6
- Icons: Handle a self-closing SVG root when extracting the element
  
  t-hamano
  and
  claude
  committed
  7b2c89c
Commits on Aug 12, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  authored
  dde0b00
Commits on Aug 18, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  authored
  b0a368a
Commits on Sep 17, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  
  t-hamano
  and
  claude
  committed
  72b6978
- Icons: Use input/expected keys in the sanitize_inline_svg data provider
  
  t-hamano
  and
  claude
  committed
  e745b53
Commits on Oct 3, 2026
- Merge branch 'trunk' into icon-registry-sanitizer
  t-hamano
  committed
  9604c0d
- Icons: Declare string types on sanitize_inline_svg()
  
  t-hamano
  and
  claude
  committed
  c4073a2
- Icons: Guard against a failed read of an icon file
  
  t-hamano
  and
  claude
  committed
  5c05c02
- Icons: Declare the array return type on the sanitize_inline_svg data provider
  
  t-hamano
  and
  claude
  committed
  f278e66
- Icons: Declare string parameter types on test_sanitize_inline_svg()
  
  t-hamano
  and
  claude
  committed
  fdc9db8

Commits

Commits on Mar 12, 2026

Commits on Jun 15, 2026

Commits on Jun 17, 2026

Commits on Jun 19, 2026

Commits on Jun 22, 2026

Commits on Jun 23, 2026

Commits on Jun 26, 2026

Commits on Jul 1, 2026

Commits on Jul 8, 2026

Commits on Jul 28, 2026

Commits on Aug 1, 2026

Commits on Aug 12, 2026

Commits on Aug 18, 2026

Commits on Sep 17, 2026

Commits on Oct 3, 2026