[wp-trac] [WordPress Trac] #28720: Shortcode Escaping Doesn't Work in Most Situations

[WordPress Trac]

#28720: Shortcode Escaping Doesn't Work in Most Situations
--------------------------+-----------------------------
 Reporter:  miqrogroove   |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Shortcodes    |    Version:  3.3
 Severity:  normal        |   Keywords:
  Focuses:                |
--------------------------+-----------------------------
 Introduced in [18952] was the possibility to escape {{{[shortcode]}}} as
 {{{[[shortcode]]}}}.  Unfortunately, there are several problems with this
 feature:

 * Escaping only works for registered shortcodes.
 * Escaping was never made compatible with wptexturize.
 * Most shortcode features never escape user input. (#15694)

 Test cases:

 {{{["Hello world"]}}} should output {{{[“Hello world”]}}}

 {{{[[example]]}}} should output {{{[example]}}}

 {{{[caption caption="hello [ world"]}}} input is invalid.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28720>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform