[wp-trac] [WordPress Trac] #14148: wp_get_attachment_url() is not url encoding

WordPress Trac noreply at wordpress.org
Sat Oct 13 10:20:14 UTC 2018


#14148: wp_get_attachment_url() is not url encoding
-------------------------------------------------+-------------------------
 Reporter:  danorton                             |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Future
                                                 |  Release
Component:  Security                             |     Version:  3.0
 Severity:  major                                |  Resolution:
 Keywords:  has-patch needs-testing dev-         |     Focuses:
  feedback needs-unit-tests needs-refresh        |
-------------------------------------------------+-------------------------

Comment (by nevis2us):

 One more note. Patching the core on this level may break existing code.
 I'm currently handling this problem in a custom plugin which applies the
 above encodeURI function to the whole URL in wp_get_attachment_url filter.
 The filter can be easily turned off in the UI in case the patches make it
 to the core.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/14148#comment:19>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list