[wp-trac] [WordPress Trac] #12284: I/O Sanity Failures With Invalid HTML Entity References

WordPress Trac wp-trac at lists.automattic.com
Fri Feb 26 12:15:15 UTC 2010


#12284: I/O Sanity Failures With Invalid HTML Entity References
-----------------------------+----------------------------------------------
 Reporter:  miqrogroove      |       Owner:  ryan     
     Type:  defect (bug)     |      Status:  new      
 Priority:  highest omg bbq  |   Milestone:  3.0      
Component:  Security         |     Version:           
 Severity:  blocker          |    Keywords:  has-patch
-----------------------------+----------------------------------------------

Comment(by miqrogroove):

 I think we missed something.  The comment RSS is getting sanitized by
 esc_html().  The comment XHTML is not.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12284#comment:19>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list