[wp-trac] [WordPress Trac] #14148: wp_get_attachment_url() is not url encoding
WordPress Trac
noreply at wordpress.org
Sat Oct 13 10:20:14 UTC 2018
#14148: wp_get_attachment_url() is not url encoding
-------------------------------------------------+-------------------------
Reporter: danorton | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Future
| Release
Component: Security | Version: 3.0
Severity: major | Resolution:
Keywords: has-patch needs-testing dev- | Focuses:
feedback needs-unit-tests needs-refresh |
-------------------------------------------------+-------------------------
Comment (by nevis2us):
One more note. Patching the core on this level may break existing code.
I'm currently handling this problem in a custom plugin which applies the
above encodeURI function to the whole URL in wp_get_attachment_url filter.
The filter can be easily turned off in the UI in case the patches make it
to the core.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/14148#comment:19>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list