[wp-trac] [WordPress Trac] #17780: Use PHP native double encoding prevention in htmlspecialchars()

WordPress Trac noreply at wordpress.org
Wed Jun 3 19:17:31 UTC 2015


#17780: Use PHP native double encoding prevention in htmlspecialchars()
-------------------------+--------------------------
 Reporter:  nbachiyski   |       Owner:  miqrogroove
     Type:  enhancement  |      Status:  accepted
 Priority:  normal       |   Milestone:  4.3
Component:  Formatting   |     Version:  3.2.1
 Severity:  normal       |  Resolution:
 Keywords:  has-patch    |     Focuses:
-------------------------+--------------------------

Comment (by azaozz):

 Replying to [comment:10 miqrogroove]:

 Unfortunately I don't remember anything about these patches, it's been
 more than 6 years :)

 Seems like at the time (and maybe still) `_wp_specialchars()` is getting
 double encoded strings and is expected to return single encoded. It is
 "undocumented behaviour" but not sure if we can remove it.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/17780#comment:11>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list