[wp-trac] [WordPress Trac] #62797: wp_add_inline_script does not properly escape '<!-- <script>' in contents
WordPress Trac
noreply at wordpress.org
Mon Jan 20 15:03:07 UTC 2025
#62797: wp_add_inline_script does not properly escape '<!-- <script>' in contents
--------------------------+------------------------------
Reporter: artpi | Owner: (none)
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Editor | Version: 5.0
Severity: normal | Resolution:
Keywords: has-patch | Focuses: administration
--------------------------+------------------------------
Changes (by shanemuir):
* keywords: has-patch needs-testing => has-patch
Comment:
== Test Report
=== Description
This report validates whether the indicated patch works as expected.
Patch tested: https://patch-diff.githubusercontent.com/raw/WordPress
/wordpress-develop/pull/8145.diff
=== Environment
- WordPress: 6.8-alpha-59274-src
- PHP: 8.3.15
- Server: Apache/2.4.62 (Unix) OpenSSL/3.4.0 PHP/8.3.15
- Database: mysqli (Server: 8.0.39 / Client: mysqlnd 8.3.15)
- Browser: Chrome 132.0.0.0
- OS: macOS
- Theme: Twenty Twenty-Five 1.0
- MU Plugins: None activated
- Plugins:
* Test Reports 1.2.0
=== Actual Results
1. ✅ Issue resolved with patch.
=== Additional Notes
Only testing using @jonsurrell patch, let me know if we need to test the
other patch too?
=== Supplemental Artifacts
Added videos of testing with and without patch applied.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/62797#comment:9>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list