[wp-trac] [WordPress Trac] #40342: Update name in toolbar when changing user display name
WordPress Trac
noreply at wordpress.org
Fri Apr 14 17:00:12 UTC 2017
#40342: Update name in toolbar when changing user display name
--------------------------------------+---------------------------------
Reporter: swissspidy | Owner: adamsilverstein
Type: enhancement | Status: assigned
Priority: normal | Milestone: 4.8
Component: Users | Version:
Severity: normal | Resolution:
Keywords: good-first-bug has-patch | Focuses: ui, administration
--------------------------------------+---------------------------------
Changes (by adamsilverstein):
* owner: => adamsilverstein
* status: new => assigned
Comment:
@maguiar Thanks for your patch here!
I'm a little concerned by the use of `.html()` here because its content
gets evaluated presenting a potential XSS vector. testing this I wasn’t
able to exploit, however it would be better to replace only the inner name
part with `.text()` which isn't evaluated, do you think that is possible?
we can add an additional span wrapper in the html if you need a way to
target the inner name part.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/40342#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list