[wp-trac] [WordPress Trac] #21537: Email address sanitisation mangles valid email addresses

WordPress Trac wp-trac at lists.automattic.com
Fri Aug 10 11:24:50 UTC 2012


#21537: Email address sanitisation mangles valid email addresses
--------------------------+-------------------------------------
 Reporter:  westi         |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  General       |    Version:  3.4.1
 Severity:  normal        |   Keywords:  needs-patch 2nd-opinion
--------------------------+-------------------------------------
 If you change your email address to one including an ampersand then we
 mangle the address with html entities.

 For example:
  * This - peter&paul at sitting.in.a.tree.com
  * Becomes - peter&paul at sitting.in.a.tree.com

 This is due to the call to {{{wp_filter_kses}}} on {{{pre_user_email'}}}
 in {{{default-filters.php}}}.

 The was added in [5906] for #4546.

 I'm not sure if we need kses filtering for emails - if we do which should
 probably revert this conversion of the & => & afterwards.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/21537>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list