[wp-trac] [WordPress Trac] #57190: public-api OEmbed effectively double-encodes entities in title

WordPress Trac noreply at wordpress.org
Wed Nov 23 22:31:07 UTC 2022


#57190: public-api OEmbed effectively double-encodes entities in title
--------------------------+------------------------------
 Reporter:  stiiin        |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Embeds        |     Version:
 Severity:  minor         |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by stiiin):

 Should've taken a bit more time to think this report through;

 * [https://public-
 api.wordpress.com/oembed/?format=json&url=https%3A%2F%2Fellentimmer.com%2F2022%2F11%2F23
 %2Fvan-wie-is-die-website%2F&for=wpcom-auto-discovery The JSON response
 for the same OEmbed request] also contains the XML/HTML character
 entities.
 * Section 2.3.4 of [https://oembed.com/ the OEmbed spec] defines the
 'title' parameter as "A text title, describing the resource." It's not
 spelled out very explicitly, but I believe this definition should be
 interpreted as "the value contains plain text data" rather than HTML.
 Another hint in this direction is that, whenever HTML is expected, it's
 explicitly mentioned as such.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57190#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list