[wp-trac] [WordPress Trac] #53869: Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output / Media Library eval of HTML entities in label

WordPress Trac noreply at wordpress.org
Wed Aug 4 13:19:44 UTC 2021


#53869: Post type / Taxonomy Label Hardening: Prevent Raw HTML tags in output /
Media Library eval of HTML entities in label
--------------------------+------------------------------
 Reporter:  sc0ttkclark   |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Security      |     Version:  5.8
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:
--------------------------+------------------------------

Comment (by sc0ttkclark):

 I've submitted a potential PR showing what a patch might be for this at
 the JS level for `uploaded_to_this_item` (via `l10n.uploadedToThisPost`)
 but more testing will be needed to ensure it's OK for i18n/l10n values
 coming through.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/53869#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list