[wp-trac] [WordPress Trac] #40342: Update name in toolbar when changing user display name

WordPress Trac noreply at wordpress.org
Fri Apr 14 17:00:12 UTC 2017


#40342: Update name in toolbar when changing user display name
--------------------------------------+---------------------------------
 Reporter:  swissspidy                |       Owner:  adamsilverstein
     Type:  enhancement               |      Status:  assigned
 Priority:  normal                    |   Milestone:  4.8
Component:  Users                     |     Version:
 Severity:  normal                    |  Resolution:
 Keywords:  good-first-bug has-patch  |     Focuses:  ui, administration
--------------------------------------+---------------------------------
Changes (by adamsilverstein):

 * owner:   => adamsilverstein
 * status:  new => assigned


Comment:

 @maguiar Thanks for your patch here!

 I'm a little concerned by the use of `.html()` here because its content
 gets evaluated presenting a potential XSS vector. testing this I wasn’t
 able to exploit, however it would be better to replace only the inner name
 part with `.text()` which isn't evaluated, do you think that is possible?
 we can add an additional span wrapper in the html if you need a way to
 target the inner name part.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/40342#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list