[wp-trac] [WordPress Trac] #29608: wptexturize messes up shortcode with parameter meta_compare=">="

WordPress Trac noreply at wordpress.org
Sat May 23 16:05:59 UTC 2015


#29608: wptexturize messes up shortcode with parameter meta_compare=">="
-------------------------------------+--------------------------
 Reporter:  bobbingwide              |       Owner:  miqrogroove
     Type:  defect (bug)             |      Status:  closed
 Priority:  normal                   |   Milestone:
Component:  Formatting               |     Version:  4.0
 Severity:  normal                   |  Resolution:  duplicate
 Keywords:  needs-patch wptexturize  |     Focuses:
-------------------------------------+--------------------------
Changes (by miqrogroove):

 * keywords:  needs-patch, wptexturize => needs-patch wptexturize
 * status:  assigned => closed
 * resolution:   => duplicate
 * milestone:  4.3 =>


Comment:

 Duplicate of #15694.

 I've updated the Summary on the other ticket to include "<" and similar
 characters.  Based on extensive testing and feedback from several core
 committers, I am confident that we cannot support raw angle braces inside
 of shortcodes in future versions and the best solution will be to
 implement escaping functions for all shortcode input.  This includes
 administrators who have unfiltered_html capability.  We are generally in
 agreement that past versions unfortunately created the impression that
 shortcodes were magical in the HTML context, when actually they were not
 and their attributes need to be HTML encoded for bugs-free operation.
 While this might create some minor inconveniences for those people editing
 raw HTML, the larger consideration is that this direction will fix several
 problems for users of shortcode GUI such as image galleries, image
 captions, and other media.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/29608#comment:21>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list