[wp-trac] [WordPress Trac] #55506: HTML tags not escaped

WordPress Trac noreply at wordpress.org
Fri Apr 1 00:18:30 UTC 2022


#55506: HTML tags not escaped
----------------------------------------+---------------------
 Reporter:  gvgvgvijayan                |       Owner:  (none)
     Type:  defect (bug)                |      Status:  new
 Priority:  normal                      |   Milestone:  6.0
Component:  REST API                    |     Version:  5.9
 Severity:  normal                      |  Resolution:
 Keywords:  needs-patch good-first-bug  |     Focuses:  docs
----------------------------------------+---------------------
Changes (by SergeyBiryukov):

 * keywords:  2nd-opinion => needs-patch good-first-bug
 * component:  WordPress.org Site => REST API
 * milestone:  Awaiting Review => 6.0


Comment:

 Hi there, welcome back to WordPress Trac! Thanks for the ticket.

 As noted above, any issues with the documentation parser should indeed be
 reported on [https://meta.trac.wordpress.org/ Meta Trac].

 However, per the [https://developer.wordpress.org/coding-standards/inline-
 documentation-standards/php/#summary-formerly-short-description WordPress
 documentation standards] function summaries should not use any markup:
 > No HTML markup or Markdown of any kind should be used in the summary. If
 the text refers to an HTML element or tag, then it should be written as
 “image tag” or “img” element, not “<img>”. For example:
 > * Good: ''Fires when printing the link tag in the header.''
 > * Bad: ''Fires when printing the <link> tag in the header.''

 So I think the `WP_REST_URL_Details_Controller::get_title()` description:
 > Parses the `<title>` contents from the provided HTML.
 should be changed to this:
 > Parses the title tag contents from the provided HTML.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/55506#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list