[wp-trac] [WordPress Trac] #27942: Site Title not escaped when using HTML entities

WordPress Trac noreply at wordpress.org
Thu Aug 14 11:15:10 UTC 2014


#27942: Site Title not escaped when using HTML entities
----------------------------------------+-----------------------------
 Reporter:  BandonRandon                |       Owner:
     Type:  defect (bug)                |      Status:  new
 Priority:  normal                      |   Milestone:  Future Release
Component:  Options, Meta APIs          |     Version:  2.9
 Severity:  normal                      |  Resolution:
 Keywords:  has-patch needs-unit-tests  |     Focuses:  administration
----------------------------------------+-----------------------------
Changes (by Clorith):

 * keywords:  has-patch => has-patch needs-unit-tests
 * focuses:   => administration
 * version:  trunk => 2.9


Comment:

 Seems like a simple fix, should probably update the patch to space out the
 attribute to conform with the coding standards.

 I did test a few versions back, and in 2.0 when `sanitize_option` was
 introduced this was not a problem, but in 2.9 it does happen, so somewhere
 along that road a regression occurred that was missed.

 We should probably also have unit tests for `sanitize_option` when
 considering all the functions the various cases relies on.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/27942#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list