Ticket #11492 (closed defect (bug): fixed)

Opened 2 years ago

Last modified 2 years ago

Lack of escaping in _wp_comment_row()

Reported by: Denis-de-Bernardy Owned by:
Priority: normal Milestone: 2.9.1
Component: Administration Version: 2.9
Severity: normal Keywords: has-patch tested
Cc:

Description

The patch is originally based on this patch for #10182.

Attachments

11492.diff Download (7.6 KB) - added by Denis-de-Bernardy 2 years ago.
completely untested

Change History

Denis-de-Bernardy — 2 years ago

completely untested

comment:1   hakre — 2 years ago

  • Keywords tested added

Tested. Patch applies clean. Output is (more) fixed. There is an empty TBODY element (by design) and duplicate IDs (the standard problems we have). So therefore looks good to me.

comment:2   ryan — 2 years ago

  • Status changed from new to closed
  • Resolution set to fixed

(In [12493]) Add escaping to _wp_comment_row(). Props Denis-de-Bernardy. fixes #11492 for trunk

comment:3   ryan — 2 years ago

(In [12494]) Add escaping to _wp_comment_row(). Props Denis-de-Bernardy. fixes #11492 for 2.9

Note: See TracTickets for help on using tickets.