[wp-trac] [WordPress Trac] #9168: Double attribute escaping for post attachments

WordPress Trac wp-trac at lists.automattic.com
Wed Feb 18 20:49:44 GMT 2009


#9168: Double attribute escaping for post attachments
--------------------------+-------------------------------------------------
 Reporter:  dwc           |       Owner:       
     Type:  defect (bug)  |      Status:  new  
 Priority:  normal        |   Milestone:  2.7.2
Component:  Media         |     Version:  2.7  
 Severity:  normal        |    Keywords:       
--------------------------+-------------------------------------------------
 When the rich editor is off, editing attachments causes the description
 field to be double encoded.  This is due to the use of htmlspecialchars,
 when the value is already encoded in sanitize_post_field.

 Switching to attribute_escape fixes this; I'll attach patches for 2.7 and
 trunk.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9168>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list