[wp-trac] [WordPress Trac] #62797: wp_add_inline_script does not properly escape '<!-- <script>' in contents

WordPress Trac noreply at wordpress.org
Mon Jan 20 15:03:07 UTC 2025


#62797: wp_add_inline_script does not properly escape '<!-- <script>' in contents
--------------------------+------------------------------
 Reporter:  artpi         |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Editor        |     Version:  5.0
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |     Focuses:  administration
--------------------------+------------------------------
Changes (by shanemuir):

 * keywords:  has-patch needs-testing => has-patch


Comment:

 == Test Report
 === Description
 This report validates whether the indicated patch works as expected.

 Patch tested: https://patch-diff.githubusercontent.com/raw/WordPress
 /wordpress-develop/pull/8145.diff

 === Environment
 - WordPress: 6.8-alpha-59274-src
 - PHP: 8.3.15
 - Server: Apache/2.4.62 (Unix) OpenSSL/3.4.0 PHP/8.3.15
 - Database: mysqli (Server: 8.0.39 / Client: mysqlnd 8.3.15)
 - Browser: Chrome 132.0.0.0
 - OS: macOS
 - Theme: Twenty Twenty-Five 1.0
 - MU Plugins: None activated
 - Plugins:
   * Test Reports 1.2.0

 === Actual Results
 1.  ✅ Issue resolved with patch.

 === Additional Notes
 Only testing using @jonsurrell patch, let me know if we need to test the
 other patch too?

 === Supplemental Artifacts
 Added videos of testing with and without patch applied.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62797#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list