[wp-trac] [WordPress Trac] #63630: Encoded HTML entities are decoded for users without unfiltered_html

WordPress Trac noreply at wordpress.org
Fri Jun 27 17:09:25 UTC 2025


#63630: Encoded HTML entities are decoded for users without unfiltered_html
--------------------------+------------------------------
 Reporter:  jonsurrell    |       Owner:  (none)
     Type:  defect (bug)  |      Status:  assigned
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  General       |     Version:  2.0
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by jonsurrell):

 It's helpful to compare this with the desired behavior where the platform
 behaves as expected.

 If a user without `unfiltered_html` capability creates a post with the
 text content `&`, the block editor will produce the following post
 content:

 {{{#!xml
 <!-- wp:paragraph -->
 <p>&amp;</p>
 <!-- /wp:paragraph -->
 }}}

 The text has been correctly HTML encoded and this is preserved after save.
 The editor will load the same content and the frontend will display the
 desired text rendered in the browser: `&`.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63630#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list