[wp-trac] [WordPress Trac] #17780: Use PHP native double encoding prevention in htmlspecialchars()

[WordPress Trac]

#17780: Use PHP native double encoding prevention in htmlspecialchars()
------------------------------+--------------------
 Reporter:  nbachiyski        |       Owner:
     Type:  enhancement       |      Status:  new
 Priority:  normal            |   Milestone:  4.3
Component:  Formatting        |     Version:  3.2.1
 Severity:  normal            |  Resolution:
 Keywords:  needs-unit-tests  |     Focuses:
------------------------------+--------------------
Changes (by miqrogroove):

 * keywords:  needs-patch dev-feedback needs-unit-tests => needs-unit-tests
 * milestone:  Future Release => 4.3


Comment:

 After patching, there were only two differences in test results:

 * Number of digits is not normalized in numeric references.
 * `'` fails the double-encoding test in PHP for some reason.

 IMO, neither of these is a deal breaker and we should consider making the
 change.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/17780#comment:5>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform