Make WordPress Core


Ignore:
Timestamp:
09/30/2025 04:59:02 PM (11 months ago)
Author:
johnbillion
Message:

Menus: Prevent HTML in menu item titles from being rendered unexpectedly.

Merges [60815] and [60816] to the 6.8 branch.

Props audrasjb, desrosj, johnbillion, jorbin, phillsav, vortfu, westonruter

Location:
branches/6.8
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/6.8

  • branches/6.8/tests/phpunit/tests/customize/nav-menu-item-setting.php

    r56421 r60818  
    9090                        'xfn'              => '',
    9191                        'status'           => 'publish',
    92                         'original_title'   => '',
    9392                        'nav_menu_term_id' => 0,
    9493                        '_invalid'         => false,
     
    582581                        'xfn'              => 'hello  inject',
    583582                        'status'           => 'draft',
    584                         'original_title'   => 'Hi',
     583                        'original_title'   => 'Hi<script>unfilteredHtml()</script>',
    585584                        'nav_menu_term_id' => 0,
    586585                );
Note: See TracChangeset for help on using the changeset viewer.