[wp-trac] [WordPress Trac] #17780: Use PHP native double encoding prevention in htmlspecialchars()

[WordPress Trac]

#17780: Use PHP native double encoding prevention in htmlspecialchars()
------------------------------+--------------------------
 Reporter:  nbachiyski        |       Owner:  miqrogroove
     Type:  enhancement       |      Status:  reopened
 Priority:  normal            |   Milestone:  4.3
Component:  Formatting        |     Version:
 Severity:  normal            |  Resolution:
 Keywords:  has-patch commit  |     Focuses:
------------------------------+--------------------------
Changes (by azaozz):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 > Seems like at the time (and maybe still) `_wp_specialchars()` is getting
 double encoded strings and is expected to return single encoded. It is
 "undocumented behaviour" but not sure if we can remove it.

 This broke post titles when there is a `&` (ampersand) in them. To
 reproduce:
 - Create new post with an ampersand in the title.
 - Save draft several times.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/17780#comment:27>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform