[wp-trac] [WordPress Trac] #35897: wp_strip_all_tags the titles in Recent Posts widget

WordPress Trac noreply at wordpress.org
Sun Feb 21 23:09:06 UTC 2016

#35897: wp_strip_all_tags the titles in Recent Posts widget
 Reporter:  alexvorn2     |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Widgets       |     Version:  4.4.2
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:  ui, template

Comment (by dd32):

 What about if you've added a `<strong>` tag to a phrase you want to add
 emphasis to? Should we strip that too?

 We allow trusted users with the `unfiltered_html` capability to post HTML
 in titles, and I'm not sure why we should apply a more strict sanitization
 to the Recent Posts widget vs the article titles.

 What's your use-case for stripping HTML from the widget vs articles?

Ticket URL: <https://core.trac.wordpress.org/ticket/35897#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform

More information about the wp-trac mailing list