[wp-trac] [WordPress Trac] #20687: Theme Customizer: Site Title & Tagline Escaped Too Far

WordPress Trac wp-trac at lists.automattic.com
Wed May 16 05:41:59 UTC 2012


#20687: Theme Customizer: Site Title & Tagline Escaped Too Far
--------------------------+--------------------------
 Reporter:  Viper007Bond  |       Owner:  koopersmith
     Type:  defect (bug)  |      Status:  assigned
 Priority:  normal        |   Milestone:  3.4
Component:  Themes        |     Version:  3.4
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |
--------------------------+--------------------------
Changes (by Viper007Bond):

 * owner:   => koopersmith
 * status:  new => assigned


Comment:

 Oh actually this is entirely a Javascript issue.

 The `<input>`'s `value` is correct -- it's only escaped once. `esc_attr()`
 is rightly not double escaping it.

 If you disable Javascript and then disable CSS (so you can see the
 collapsed input), then you can see it working correctly.

 However when the Javascript pulls the value out of the HTML and fills the
 field in with it or whatever it does, it's not decoding HTML entities
 which causes the issue.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/20687#comment:2>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list