#5135 closed defect (bug) (fixed)
Pages are not sanitized in wp-admin/page.php
| Reported by: |
|
Owned by: |
|
|---|---|---|---|
| Priority: | normal | Milestone: | 2.3.1 |
| Component: | Administration | Version: | 2.3 |
| Severity: | normal | Keywords: | |
| Cc: |
Description
As a consequence of #4546, page contents are not sanitized in wp-admin/page.php, this bug is present in WP 2.3 and trunk (rev 6181).
Steps to reproduce the problem:
- Create a new page with any title and some html.
</textarea><script>alert(/Not escaped/)</script>
- Press "Save and Continue Editing" button.
The attached patch adds sanitize_post to get_page function and also escapes post_title in parent_dropdown.
Attachments (1)
Change History (3)
Note: See
TracTickets for help on using
tickets.

sanitize pages