[wp-trac] [WordPress Trac] #26307: Link tool in basic editor should escape quotes

WordPress Trac noreply at wordpress.org
Thu Jan 9 20:56:31 UTC 2014


#26307: Link tool in basic editor should escape quotes
--------------------------+--------------------
 Reporter:  krinklemail   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.9
Component:  Editor        |     Version:  3.7.1
 Severity:  major         |  Resolution:
 Keywords:  has-patch     |
--------------------------+--------------------

Comment (by azaozz):

 The patch makes sense. Perhaps it should escape the other
 "htmlspecialchars" too, something like:
 {{{
 if ( attrs.title ) {
   var title = attrs.title.replace( /"/g, '"' ).replace( /</g, '<'
 ).replace( />/g, '>' );
   html += ' title="' + title + '"';
 }
 }}}

--
Ticket URL: <https://core.trac.wordpress.org/ticket/26307#comment:6>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list