[wp-trac] [WordPress Trac] #24083: the_author_posts_link() not properly escaping HTML output

WordPress Trac noreply at wordpress.org
Mon Apr 15 00:46:39 UTC 2013


#24083: the_author_posts_link() not properly escaping HTML output
-------------------------+--------------------
 Reporter:  bradkovach   |       Owner:
     Type:  enhancement  |      Status:  new
 Priority:  normal       |   Milestone:  3.6
Component:  Template     |     Version:  3.5.1
 Severity:  normal       |  Resolution:
 Keywords:               |
-------------------------+--------------------

Comment (by SergeyBiryukov):

 Note that `user_nicename` field (which the function uses to construct the
 URL) is supposed to be a sanitized (URL-friendly) version of `user_login`.
 It should not contain spaces.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/24083#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list