[wp-trac] [WordPress Trac] #18798: Sanitizing post in get_attachment_fields_to_edit() can cause double encoding under certain circumstances

WordPress Trac wp-trac at lists.automattic.com
Tue Sep 27 23:33:09 UTC 2011


#18798: Sanitizing post in get_attachment_fields_to_edit() can cause double
encoding under certain circumstances
--------------------------+-----------------------------
 Reporter:  wpdavis       |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Media         |    Version:  2.5
 Severity:  normal        |   Keywords:  has-patch
--------------------------+-----------------------------
 In get_attachment_fields_to_edit, the $post object is sanitized using the
 'edit' flag, which converts HTML entities. Under some circumstances this
 can cause entities to be double-encoded (as in, "), because the
 html entities are already

 To fix this, sanitize the post using the 'raw' flag.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/18798>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list