[buddypress-trac] [BuddyPress Trac] #7027: Angle brackets of links in profile fields are escaped

buddypress-trac noreply at wordpress.org
Fri Apr 22 18:20:56 UTC 2016


#7027: Angle brackets of links in profile fields are escaped
--------------------------+-----------------------------
 Reporter:  dowen777      |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  highest       |  Milestone:  Awaiting Review
Component:  API           |    Version:
 Severity:  normal        |   Keywords:
--------------------------+-----------------------------
 Email addresses, profile images and websites no longer display as links
 due to the escaping of < and > (left and right angle brackets).

 For example, the email line on the page:
 http://thelincolnacademyofillinois.org/members/robert_easter/

 now reads as HTML code instead of as a clickable link. This is due to the
 left angle brackets, <, being replaced by & l t ; (spaces added) and the
 right angle bracket, >, being replaced by & g t ; (spaces added). This
 effectively breaks all profile images, email addresses and web URLs.

 Also view:
 view-source:http://thelincolnacademyofillinois.org/members/robert_easter/
 line 671.

 So, what should be HTML code is displayed as simple text.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/7027>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list