[wp-trac] [WordPress Trac] #12864: Nav Menus: while item descriptions are strip_tags()'ed, they aren't wptexturize()'d

WordPress Trac wp-trac at lists.automattic.com
Tue Apr 6 02:00:40 UTC 2010


#12864: Nav Menus: while item descriptions are strip_tags()'ed, they aren't
wptexturize()'d
--------------------------+-------------------------------------------------
 Reporter:  ptahdunbar    |       Owner:  ptahdunbar
     Type:  defect (bug)  |      Status:  new       
 Priority:  normal        |   Milestone:  3.0       
Component:  Menus         |     Version:  3.0       
 Severity:  normal        |    Keywords:            
--------------------------+-------------------------------------------------
 #12544 adds strip_tags() to all item descriptions in the nav menus admin.
 However the descriptions still leak out if apostrophes are in the content,
 breaking it out of the hidden input element.

 Patch turns the item descriptions and attribute titles into filters and
 runs both strip_tags() and wptexturize() (which converts plain characters
 into formatted html entities) on them.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12864>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list