WordPress esc_html() Raw I/O During Comment Feed Test

Robert Chapin (miqrogroove) 18 February 2010

Each line has a time stamp, followed by 1 for argument in, 2 for returned out, and the raw string.


I/O before patch:

[19-Feb-2010 02:03:55] 1'UTF-8'
[19-Feb-2010 02:03:55] 1'UTF-8'
[19-Feb-2010 02:03:55] 1'UTF-8'
[19-Feb-2010 02:03:55] 1''
[19-Feb-2010 02:03:55] 1'UTF-8'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'Hello world, This is an ⊕ test!'
[19-Feb-2010 02:03:55] 2'Hello world, This is an ⊕ test!'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'Hello world &oink; This is a perfect test.'
[19-Feb-2010 02:03:55] 2'Hello world &oink; This is a perfect test.'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'Hello world wp_kses_named_entities This is a fun test.'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'testing123456  :)  ogogadfskjd   <code>wuzzup</code>'
[19-Feb-2010 02:03:55] 2'testing123456  :)  ogogadfskjd   &lt;code&gt;wuzzup&lt;/code&gt;'
[19-Feb-2010 02:03:55] 1':)'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'Testing 1234 <a href="http://www.google.com/" rel="nofollow">fskfjld</a>'
[19-Feb-2010 02:03:55] 2'Testing 1234 &lt;a href=&quot;http://www.google.com/&quot; rel=&quot;nofollow&quot;&gt;fskfjld&lt;/a&gt;'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'This is a test comment "www.google.com"'
[19-Feb-2010 02:03:55] 2'This is a test comment &quot;www.google.com&quot;'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'This is a test comment <a>oinks</a>'
[19-Feb-2010 02:03:55] 2'This is a test comment &lt;a&gt;oinks&lt;/a&gt;'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'This is a test comment <a href="http://www.google.com" rel="nofollow">moooo</a>'
[19-Feb-2010 02:03:55] 2'This is a test comment &lt;a href=&quot;http://www.google.com&quot; rel=&quot;nofollow&quot;&gt;moooo&lt;/a&gt;'
[19-Feb-2010 02:03:55] 1'Hello world!'
[19-Feb-2010 02:03:55] 1'Hi, this is a comment.<br />To delete a comment, just log in and view the post&#039;s comments. There you will have the option to edit or delete them.'
[19-Feb-2010 02:03:55] 2'Hi, this is a comment.&lt;br /&gt;To delete a comment, just log in and view the post&#039;s comments. There you will have the option to edit or delete them.'


I/O after patch:

[19-Feb-2010 02:37:55] 1'UTF-8'
[19-Feb-2010 02:37:55] 1'UTF-8'
[19-Feb-2010 02:37:55] 1'UTF-8'
[19-Feb-2010 02:37:55] 1''
[19-Feb-2010 02:37:55] 1'UTF-8'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'This is another &#38;amp; neato test.'
[19-Feb-2010 02:37:55] 2'This is another &amp; neato test.'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'Hello world, This is an &#8853; test!'
[19-Feb-2010 02:37:55] 2'Hello world, This is an &#8853; test!'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'Hello world &#38;oink; This is a perfect test.'
[19-Feb-2010 02:37:55] 2'Hello world &amp;oink; This is a perfect test.'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'Hello world wp_kses_named_entities This is a fun test.'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'testing123456  :)  ogogadfskjd   <code>wuzzup</code>'
[19-Feb-2010 02:37:55] 2'testing123456  :)  ogogadfskjd   &lt;code&gt;wuzzup&lt;/code&gt;'
[19-Feb-2010 02:37:55] 1':)'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'Testing 1234 <a href="http://www.google.com/" rel="nofollow">fskfjld</a>'
[19-Feb-2010 02:37:55] 2'Testing 1234 &lt;a href=&quot;http://www.google.com/&quot; rel=&quot;nofollow&quot;&gt;fskfjld&lt;/a&gt;'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'This is a test comment "www.google.com"'
[19-Feb-2010 02:37:55] 2'This is a test comment &quot;www.google.com&quot;'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'This is a test comment <a>oinks</a>'
[19-Feb-2010 02:37:55] 2'This is a test comment &lt;a&gt;oinks&lt;/a&gt;'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'This is a test comment <a href="http://www.google.com" rel="nofollow">moooo</a>'
[19-Feb-2010 02:37:55] 2'This is a test comment &lt;a href=&quot;http://www.google.com&quot; rel=&quot;nofollow&quot;&gt;moooo&lt;/a&gt;'
[19-Feb-2010 02:37:55] 1'Hello world!'
[19-Feb-2010 02:37:55] 1'Hi, this is a comment.<br />To delete a comment, just log in and view the post&#039;s comments. There you will have the option to edit or delete them.'
[19-Feb-2010 02:37:55] 2'Hi, this is a comment.&lt;br /&gt;To delete a comment, just log in and view the post&#039;s comments. There you will have the option to edit or delete them.'