[wp-trac] [WordPress Trac] #14148: wp_get_attachment_url() is not url encoding

WordPress Trac noreply at wordpress.org
Tue Oct 16 11:33:03 UTC 2018


#14148: wp_get_attachment_url() is not url encoding
-------------------------------------------------+-------------------------
 Reporter:  danorton                             |       Owner:  (none)
     Type:  defect (bug)                         |      Status:  new
 Priority:  normal                               |   Milestone:  Future
                                                 |  Release
Component:  Security                             |     Version:  3.0
 Severity:  major                                |  Resolution:
 Keywords:  has-patch needs-testing dev-         |     Focuses:
  feedback needs-unit-tests needs-refresh        |
-------------------------------------------------+-------------------------

Comment (by nevis2us):

 Replying to [comment:20 Mte90]:
 > Cna you share the code of your custom plugin?
 > So we can understand better how to handle it.

 Complete plugin with the fix mentioned above can be downloaded from
 http://ipros24.ru/wordpress/#ipros24-fixpack. It also includes fixes for
 similar encoding problems in image_get_intermediate_size() and
 image_downsize() core functions. After install individual fixes must be
 enabled in Settings -> Fixpack.

 This plugin may break 3rd party code e.g. Jetpack, which also uses
 image_downsize filter to override the core function.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/14148#comment:22>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list