[wp-trac] [WordPress Trac] #27942: Site Title not escaped when using HTML entities

WordPress Trac noreply at wordpress.org
Sun Dec 6 20:28:28 UTC 2015


#27942: Site Title not escaped when using HTML entities
---------------------------------------------+-----------------------------
 Reporter:  BandonRandon                     |       Owner:  kovshenin
     Type:  defect (bug)                     |      Status:  closed
 Priority:  normal                           |   Milestone:  4.5
Component:  Options, Meta APIs               |     Version:  2.9
 Severity:  normal                           |  Resolution:  fixed
 Keywords:  has-patch has-unit-tests commit  |     Focuses:  administration
---------------------------------------------+-----------------------------
Changes (by kovshenin):

 * status:  assigned => closed
 * resolution:   => fixed


Comment:

 In [changeset:"35788"]:
 {{{
 #!CommitTicketReference repository="" revision="35788"
 Allow usage of angle brackets in a site title or tagline.

 The whole string is escaped with `esc_html()` anyway, so we don't
 need to `wp_kses_post()`. This is a better experience for users who
 want to use angle brackets in their site title or description.
 Does not allow any HTML, adds unit tests.

 props BandonRandon, pauldewouters.
 fixes #27942.
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27942#comment:13>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list