[wp-trac] [WordPress Trac] #29759: Bug when using ampersand "&" in menutitle WP multisite

[WordPress Trac]

#29759: Bug when using ampersand "&" in menutitle WP multisite
--------------------------+----------------------------------------
 Reporter:  lrgolf        |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Menus         |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:  administration, multisite
--------------------------+----------------------------------------
Changes (by jeremyfelt):

 * status:  new => closed
 * version:  4.0 =>
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Hi @lrgolf, thanks for the report.

 In a single site configuration, administrators have the `unfiltered_html`
 capability, which means the default kses filters do not fire and `&`
 survives. In a multisite configuration, only super admins have this
 `unfiltered_html` capability. Standard site administrators will have their
 menu titles filtered through a chain that includes
 `wp_kses_normalize_entities`, which replaces `&` with `&`.

 While this can be confusing, it is expected behavior for now. The
 [https://make.wordpress.org/core/2013/10/06/potential-roadmap-for-
 multisite/ roadmap for multisite] includes a possible future where other
 users on a closed network are trusted with the `unfiltered_html`
 capability.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29759#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform