[wp-trac] [WordPress Trac] #23519: esc_url() mangles array format query variables in URLs

WordPress Trac noreply at wordpress.org
Tue Feb 19 08:30:31 UTC 2013


#23519: esc_url() mangles array format query variables in URLs
-----------------------------+--------------------------
 Reporter:  johnbillion      |       Type:  defect (bug)
   Status:  new              |   Priority:  normal
Milestone:  Awaiting Review  |  Component:  Formatting
  Version:  3.4              |   Severity:  normal
 Keywords:                   |
-----------------------------+--------------------------
 `http://example.com/?test[foo]=bar` is a valid URL, but `esc_url()`
 mangles it into `http://example.com/?testfoo=bar`.

 To reproduce:

 {{{
 $url = 'http://example.com/?test[foo]=bar';

 echo '<pre>';
 var_dump( $url );
 var_dump( esc_url( $url ) );
 echo '</pre>';
 }}}

 Also affects array format query variables without named keys, eg.
 `foo[]=bar`.

 Tested back to 3.4. May affect earlier versions.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/23519>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list