[wp-trac] [WordPress Trac] #15694: Shortcode I/O Intolerant of "]", "<", Quotes, etc.

[WordPress Trac]

#15694: Shortcode I/O Intolerant of "]", "<", Quotes, etc.
-------------------------------------------------+-------------------------
 Reporter:  miqrogroove                          |       Owner:
     Type:  defect (bug)                         |  miqrogroove
 Priority:  high                                 |      Status:  assigned
Component:  Shortcodes                           |   Milestone:  Future
 Severity:  blocker                              |  Release
 Keywords:  needs-patch needs-unit-tests 2nd-    |     Version:  3.0.1
  opinion                                        |  Resolution:
                                                 |     Focuses:  javascript
-------------------------------------------------+-------------------------

Comment (by miyarakira):

 I second moving severity to critical. As the auto-update rolls through,
 increasing number of sites and users are affected here as well, with
 support tickets piling up. A seemingly innocuous use case such as:

 {{{
 <img src="[field image-url]">
 }}}

 ..which used to display a featured image, now outputs:

 {{{
 <img src>
 }}}

 This is just one of numerous real-life uses of shortcodes which depended
 on behavior prior to 4.2.3.

 Another breaking consequence: there are shortcodes which render "tags"
 inside its wrapped content, in the syntax:

 {{{
 [shortcode]
   <a href="{URL}">{TITLE}</a>
 [/shortcode]
 }}}

 Now does not work.

 The "workarounds" mentioned in the Make announcement are not applicable or
 practical in any of the issues I've looked at so far. It's impossible to
 go through all past sites to find & replace any occurrences of shortcodes
 in HTML attributes - and, at least in the issues I'm seeing, the
 recommended solutions do not work. There's also nothing that a plugin or
 theme developer can do to address the issue, since the content has been
 stripped already - there's no filter or hook to customize the behavior.

 This is a critical break in backward compatibility, and needs attention.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/15694#comment:35>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform