WordPress.org

Make WordPress Core

Opened 6 years ago

Closed 6 years ago

#3523 closed defect (bug) (fixed)

Permalink Options page needs to 'HTML entitise' the displayed htaccess rules in the textarea element.

Reported by: JeremyVisser Owned by: anonymous
Priority: normal Milestone: 2.0.8
Component: Administration Version: 2.1
Severity: normal Keywords: has-patch
Cc:

Description

In /wp-admin/options-permalink.php, when your .htaccess file isn't writable by the server, WordPress will display a textbox for you to copy-and-paste the permalink rules from.

The rules contain the lines "<IfModule mod_rewrite.c>" and "</IfModule>" which must be encoded with HTML entities if it is to be well-formed XHTML. Encoding with wp_specialchars() does the trick.

Attachments (1)

options-permalink.php.diff​ (584 bytes) - added by JeremyVisser 6 years ago.
Uses wp_specialchars() around the .htaccess rules

Download all attachments as: .zip

Change History (5)

JeremyVisser — 6 years ago

Uses wp_specialchars() around the .htaccess rules

comment:1 markjaquith — 6 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [4681]) Ensure XHTML validity when presenting mod_rewrite rules for copy-paste. Props JeremyVisser. fixes #3523

comment:2 markjaquith — 6 years ago

  • Milestone changed from 2.1 to 2.0.7
  • Resolution fixed deleted
  • Status changed from closed to reopened

Revisit for 2.0.7

Note: unlike most wp_specialchars() omissions, this one does not appear to have security implications... it's just an issue of XHTML validity.

comment:3 markjaquith — 6 years ago

  • Milestone changed from 2.0.7 to 2.0.8

comment:4 markjaquith — 6 years ago

  • Resolution set to fixed
  • Status changed from reopened to closed

(In [4789]) Ensure XHTML validity when presenting mod_rewrite rules for copy-paste. Props JeremyVisser. fixes #3523

Note: See TracTickets for help on using tickets.