[wp-trac] Re: [WordPress Trac] #9727: missing escape in wp_update_post?

[WordPress Trac]

#9727: missing escape in wp_update_post?
-------------------------------+--------------------------------------------
 Reporter:  Denis-de-Bernardy  |       Owner:  ryan                              
     Type:  defect (bug)       |      Status:  new                               
 Priority:  normal             |   Milestone:  2.8                               
Component:  Security           |     Version:  2.8                               
 Severity:  normal             |    Keywords:  2nd-opinion dev-feedback has-patch
-------------------------------+--------------------------------------------

Comment(by Denis-de-Bernardy):

 added this to the end of my wp-config.php file to give it a try:

 {{{
 $post_id = 119;
 $post = get_post($post_id);
 dump($post->post_title); // string(41) "Comment on Quisque \' Eget Dolor
 by admin"
 wp_update_post($post);
 unset($post);
 $post = get_post($post_id); // string(40) "Comment on Quisque ' Eget Dolor
 by admin"
 dump($post->post_title);
 }}}

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9727#comment:8>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software