Opened 2 years ago

Last modified 2 years ago

#17095 reopened defect (bug)

format or validate author url from api.wordpress.org

Reported by: wycks Owned by:
Priority: normal Milestone: WordPress.org
Component: WordPress.org site Version:
Severity: normal Keywords: needs-patch
Cc:

Description (last modified by westi)

The author url from api.wordpress.org does not seem to do full format checking. Not apparent in browsers since they will understand malformed urls but is a problem when outputting elsewhere.

Example: 

<author type="string"><![CDATA[<a href="http:www.artificium.sk">Stanislav Gunčaga</a>]]></author>


Change History (6)

comment:1   nacin — 2 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

You'll have to try WordPress.com support. This Trac is for the open source project at WordPress.org.

comment:2   westi — 2 years ago

  • Milestone set to WordPress.org
  • Resolution invalid deleted
  • Status changed from closed to reopened

Actually he means api.wordpress.org :)

e.g.

​http://api.wordpress.org/plugins/info/1.0/WP-Custom-Pages.xml

comment:3   westi — 2 years ago

  • Description modified (diff)
  • Summary changed from format or validate author url from api.wordpress.com to format or validate author url from api.wordpress.org

comment:4   nacin — 2 years ago

Looks like this is data straight from the plugin: ​http://plugins.svn.wordpress.org/wp-custom-pages/trunk/wp-custom-pages.php.

Not sure if we should adjust the parser to correct this. It's quite the edge case.

comment:5   ocean90 — 2 years ago

  • Version 3.1 deleted

nacin: Maybe we can use the new malware check here? (16923#comment:7 )

comment:6   nacin — 2 years ago

That's not the issue.. It's the validity of the URL: "http:" versus "​http://".

Note: See TracTickets for help on using tickets.