[wp-trac] [WordPress Trac] #24083: the_author_posts_link() not properly escaping HTML output

WordPress Trac noreply at wordpress.org
Sun Apr 14 19:07:11 UTC 2013


#24083: the_author_posts_link() not properly escaping HTML output
-----------------------------+--------------------------
 Reporter:  bradkovach       |       Type:  defect (bug)
   Status:  new              |   Priority:  normal
Milestone:  Awaiting Review  |  Component:  General
  Version:  3.5.1            |   Severity:  minor
 Keywords:                   |
-----------------------------+--------------------------
 I was running an HTML5 validator on one of the sites I manage and noticed
 that the_author_posts_link is not properly escaped.

 For example,

 {{{
 <a href="http://www.chud.com/author/William Thomas-Berk/" title="Posts by
 William Thomas Berk" rel="author">William Thomas Berk</a>
 }}}

 Notice that the URI has a space in it that should be encoded as {{{%20}}}
 before being output.  As a result, there are a lot of HTML validation
 errors being shown as a result.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/24083>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list