[wp-trac] [WordPress Trac] #15505: Excerpt is being double-escaped

WordPress Trac wp-trac at lists.automattic.com
Sat Nov 20 06:09:07 UTC 2010


#15505: Excerpt is being double-escaped
----------------------------+-----------------------------------------------
 Reporter:  Viper007Bond    |       Owner:           
     Type:  defect (bug)    |      Status:  new      
 Priority:  normal          |   Milestone:  3.1      
Component:  Administration  |     Version:  3.1      
 Severity:  normal          |    Keywords:  has-patch
----------------------------+-----------------------------------------------

Comment(by ryan):

 The edit action in wp-admin/post.php fetches the post with
 get_post_to_edit(). This goes through the post sanitation and eventually
 calls format_to_edit() on the excerpt.  This escaped post object is pass
 to all of the meta boxes.  post_content, post_title, post_excerot, and
 post_password all get the format_to_edit() treatment.

 Aside: Perhaps format_to_edit() should use esc_textarea().

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/15505#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list