[wp-trac] [WordPress Trac] #26100: Escape HTML in theme author name to allow for ampersands

WordPress Trac noreply at wordpress.org
Tue Nov 19 05:52:57 UTC 2013


#26100: Escape HTML in theme author name to allow for ampersands
--------------------------+--------------------
 Reporter:  morganestes   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.8
Component:  Themes        |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |
--------------------------+--------------------
Changes (by SergeyBiryukov):

 * milestone:  Awaiting Review => 3.8


Old description:

> In `wp-admin/themes.php`, the template prints `&` to the screen if
> there's an ampersand in the author name (multiple theme authors using "&"
> instead of "and".
>
> Tested in trunk after THX38, not sure if it was in there before.
> [http://core.trac.wordpress.org/ticket/24775] references a similar issue.
>
> Changing from `{{ data.author }}` to `{{{ data.author }}}` fixes the
> issue when displaying the theme details overlay.

New description:

 In `wp-admin/themes.php`, the template prints `&` to the screen if
 there's an ampersand in the author name (multiple theme authors using "&"
 instead of "and".

 Tested in trunk after THX38, not sure if it was in there before. #24775
 references a similar issue.

 Changing from `{{ data.author }}` to `{{{ data.author }}}` fixes the issue
 when displaying the theme details overlay.

--

--
Ticket URL: <http://core.trac.wordpress.org/ticket/26100#comment:1>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list