Opened 5 years ago

Closed 3 years ago

#7796 closed defect (bug) (worksforme)

Export doesn't enclose comment content text in <![CDATA[ even though people can include stuff that breaks parsers in comments

Reported by: nyohannes Owned by:
Priority: normal Milestone:
Component: Export Version:
Severity: normal Keywords:
Cc: david_v_wright@…

Description

It's common for people to link to stuff in a comment.

If you export a blog using the exporter, <​wp:comment_content> isn't escaped using a <![CDATA

If someone included a url with valid url parameters in their comment text, e.g.,

"Yes, the release notes are available at our online forum:
​http://www.intellij.net/forums/thread.jspa?threadID=274511&tstart=0"

It would break any parsers trying to import that comment

Change History (4)

comment:1   ryan — 4 years ago

  • Component changed from General to Export
  • Owner anonymous deleted

comment:2   janeforshort — 4 years ago

  • Milestone changed from 2.8 to 2.9

Punting due to feature freeze. Reconsider with next release.

comment:4   nacin — 3 years ago

  • Milestone 2.9 deleted
  • Resolution set to worksforme
  • Status changed from new to closed

Appears to have been fixed in [7299] seven months before. Closed pending reporter feedback.

Note: See TracTickets for help on using tickets.