[wp-trac] [WordPress Trac] #25385: Validate URL for user comments in Comment Form

WordPress Trac noreply at wordpress.org
Sun Sep 22 12:44:41 UTC 2013


#25385: Validate URL for user comments in Comment Form
--------------------------+------------------------------
 Reporter:  nofearinc     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Comments      |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |
--------------------------+------------------------------
Description changed by SergeyBiryukov:

Old description:

> Submitting a comment on a post allows for any sort of non-empty URL
> website address, including "asdf". Using the `is_url` function proposal
> in [http://core.trac.wordpress.org/ticket/12868 #12868] by
> [http://profiles.wordpress.org/technosailor technosailor] would help
> validating various URLs around the core, and adding a verification in
> `wp-comment-post.php` would disallow commenting with invalid URLs.
>
> Somewhat related: [http://core.trac.wordpress.org/ticket/10970 #10970],
> [http://core.trac.wordpress.org/ticket/18769 #18769].

New description:

 Submitting a comment on a post allows for any sort of non-empty URL
 website address, including "asdf". Using the `is_url` function proposal in
 #12868 by [http://profiles.wordpress.org/technosailor technosailor] would
 help validating various URLs around the core, and adding a verification in
 `wp-comment-post.php` would disallow commenting with invalid URLs.

 Somewhat related: #10970, #18769.

--

--
Ticket URL: <http://core.trac.wordpress.org/ticket/25385#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list