Curing a Critical Security Bug

A WordCamp US this year, I spoke about the Trojan Emoji security bug, which we fixed in WordPress 4.1.2. In particular, I went through how we came to wrap our head around the bug, and then write a solution that worked for every WordPress site.