[buddypress-trac] [BuddyPress Trac] #6815: Escape properly groups names on wp-admin groups delete confirmation page

buddypress-trac noreply at wordpress.org
Mon Jan 11 11:44:59 UTC 2016


#6815: Escape properly groups names on wp-admin groups delete confirmation page
--------------------------------------+-----------------------------
 Reporter:  slaFFik                   |      Owner:
     Type:  defect (bug)              |     Status:  new
 Priority:  normal                    |  Milestone:  Awaiting Review
Component:  General - Administration  |    Version:
 Severity:  normal                    |   Keywords:
--------------------------------------+-----------------------------
 On this page `/wp-admin/admin.php?page=bp-groups` all groups names are
 escaped properly, if they have `'` or `"` in names, example: `What's
 League Of Legends?`
 But on groups deletion (bulk delete) pages like these `/wp-
 admin/admin.php?s&page=bp-groups&action=delete&paged=1&gid[0]=134` groups
 names in a list are not escaped properly and I see `What\'s League Of
 Legends?` there.

--
Ticket URL: <https://buddypress.trac.wordpress.org/ticket/6815>
BuddyPress Trac <http://buddypress.org/>
BuddyPress Trac


More information about the buddypress-trac mailing list