#42182
|
esc_js must escape U+2028 and U+2029
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
10/11/2017
|
#46791
|
esc_url() adding http:// to a relative URL to parent directory '../pathname/'
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
05/23/2019
|
#34407
|
esc_url() cannot handle a relative URL containing a : character (IPv6)
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#23975
|
force_balance_tags in get_the_content breaks non-HTML formats
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#39847
|
force_balance_tags not properly balancing < with <strong> and </strong>
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
09/22/2024
|
#56433
|
invalid regex used in preg_replace
|
|
reporter-feedback
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
08/24/2022
|
#25108
|
is_email() function validates email with domain that just has 1 character after dot
|
|
has-patch
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#60391
|
links_add_base_url will encode all attribut in null passed in
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
01/30/2024
|
#17433
|
localhost is not accepted as email domain
|
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
03/20/2018
|
#40324
|
make_clickable doesn't work if url stands after an even number off spaces
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
03/31/2017
|
#23050
|
make_clickable incorrectly formats anchors with URL's and spaces in them in comments
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#50514
|
make_clickable nested links bug
|
|
needs-unit-tests
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
10/12/2020
|
#23308
|
make_clickable problem with multiple "Punctuation URL character"
|
|
dev-feedback
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#23922
|
make_clickable() breaks when colon in hash
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#44793
|
remove_accents() doesnt escape all versions of "i"
|
SergeyBiryukov
|
dev-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
09/22/2019
|
#24157
|
safecss_filter_attr doesn't allow rgb() in inline styles
|
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
06/09/2024
|
#53815
|
safecss_filter_attr removes styles with min() max() and minmax()
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
07/28/2021
|
#60979
|
safecss_filter_attr() should support query strings with "&" as used by Gutenberg
|
|
has-patch
|
normal
|
normal
|
6.7
|
defect (bug)
|
10/04/2024
|
#50855
|
sanitize_file_name function not working as expected if there is '%20' in filename
|
audrasjb*
|
dev-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
10/07/2022
|
#33924
|
sanitize_html_class valid characters
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
09/20/2022
|
#34039
|
shortcode_parse_atts() no longer parses embedded html fragments
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#14050
|
shortcode_unautop() should also remove the <br /> added after shortcodes
|
aaroncampbell
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#55996
|
the get_the_block_template_html call all the same functions as the the_conent filter so they are run twice
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
08/28/2024
|
#17039
|
the_excerpt() - <!--more--> handling
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#54488
|
wp_filter_nohtml_kses does not remove HTML comments
|
audrasjb
|
dev-feedback
|
normal
|
normal
|
Future Release
|
defect (bug)
|
10/12/2023
|
#30597
|
wp_filter_post_kses mangles URLs with colons in them
|
|
needs-unit-tests
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#58377
|
wp_kses filters custom block name with consecutive hyphens
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
05/23/2023
|
#61246
|
wp_kses makes HTML comment HTML uncommented
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
09/03/2024
|
#58921
|
wp_kses_allowed_html doesn't allow to add esi:include
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
06/22/2024
|
#62024
|
wp_kses_post incorrectly escapes "<" attributes values
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
09/10/2024
|
#37698
|
wp_kses_split global variable pollution
|
|
has-patch
|
normal
|
normal
|
Future Release
|
defect (bug)
|
02/09/2021
|
#54138
|
wp_strip_all_tags should remove scripts/styles content recursively
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
09/16/2021
|
#46886
|
wp_targeted_link_rel adds the rel attribute when the link has data-target=""
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
04/13/2019
|
#18549
|
wp_texturize incorrectly curls closing quotes after inline HTML end tags
|
miqrogroove
|
has-patch
|
normal
|
normal
|
|
defect (bug)
|
08/18/2023
|
#60793
|
wp_trigger error has a wrong wp_kses $allowed_html arguement.
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
03/18/2024
|
#37672
|
wpautop adds a closing p-tag without an opening p-tag
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
04/18/2019
|
#40676
|
wpautop adds opening & closing p tags around the opening a tag and around the closing a tag when the link contains certain flow content elements like div, h1, h2...
|
|
needs-unit-tests
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
07/21/2017
|
#40202
|
wpautop bad code
|
|
|
normal
|
normal
|
Future Release
|
defect (bug)
|
05/21/2020
|
#33466
|
wpautop breaks multi-line textarea content
|
miqrogroove
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#2833
|
wpautop breaks style and script tags
|
|
dev-feedback
|
low
|
normal
|
Future Release
|
defect (bug)
|
03/21/2024
|
#33840
|
wpautop damages inline script
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#38656
|
wpautop incorrectly handling paragraphs within block elements
|
|
needs-unit-tests
|
normal
|
normal
|
Future Release
|
defect (bug)
|
03/26/2019
|
#49492
|
wpautop inserted p tags inconsistently alter visual space
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
02/22/2020
|
#43394
|
wpautop inserts extraneous line breaks if hard return around commented content
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
06/15/2020
|
#15918
|
wpautop() breaks inline tags on the same line as block tags
|
dunno
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#11678
|
wpautop() fails on uppercase closing tags
|
|
dev-feedback
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#43313
|
wptexturise uses the wrong curly quote after a closing link tag
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
04/15/2018
|
#54721
|
wptexturize caches the result of run_wptexturize preventing themes from using this if a plugin has already called get_plugin_data
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
07/20/2024
|
#43785
|
wptexturize fails to skip JavaScript if code contains <
|
|
needs-unit-tests
|
normal
|
normal
|
Future Release
|
defect (bug)
|
07/10/2024
|
#34592
|
wptexturize interprets apostrophe at end of word as closing single quote
|
|
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#49965
|
wptexturize should also work when using before hook after_theme_setup
|
|
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
04/21/2020
|
#61817
|
wptexturize(): Hyphen may be replaced with ndash
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
defect (bug)
|
08/04/2024
|
#29882
|
wptexturize: quotes inside quotes curling incorrectly
|
|
has-patch
|
normal
|
normal
|
|
defect (bug)
|
06/04/2019
|
#10269
|
wysiwyg bug with shortcodes
|
miqrogroove
|
|
low
|
normal
|
|
defect (bug)
|
06/04/2019
|
#30644
|
"wpautop" Enhancements
|
|
dev-feedback
|
normal
|
normal
|
|
enhancement
|
08/11/2020
|
#54322
|
Add Logical Properties to safecss_filter_attr
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
11/19/2021
|
#18330
|
Add a Class functionality to wpautop()
|
|
has-patch
|
normal
|
normal
|
|
enhancement
|
07/25/2023
|
#52444
|
Add support for Telegram Messenger Protocol
|
|
close
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
02/05/2021
|
#51707
|
Add white-space as an allowed kses CSS attribute.
|
|
has-patch
|
normal
|
normal
|
Future Release
|
enhancement
|
11/15/2020
|
#60544
|
Allow individual blocks to be excluded from `excerpt_remove_blocks()`
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
10/09/2024
|
#43010
|
Attribute Name Escape
|
|
needs-unit-tests
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
01/18/2022
|
#41458
|
Class gets stripped out when inserting a link in author biography box
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
07/30/2017
|
#39724
|
Defining custom validation callbacks for tag/attribute values in wp_kses()
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
06/17/2017
|
#57517
|
Expose MutationObserver instance in wpEmoji
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
01/20/2023
|
#43224
|
Extract `$utf8_pcre` from `wp_check_invalid_utf8()` into a separate function
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
01/16/2019
|
#26868
|
Function 'make_clickable()' doesn't make hyperlinks from explicit URLs using the `mailto:`, `tel:` and other schemes that do not start with `//`
|
|
needs-unit-tests
|
normal
|
normal
|
|
enhancement
|
06/04/2019
|
#24225
|
Improve regular expressions when matching attributes
|
miqrogroove
|
needs-unit-tests
|
normal
|
normal
|
|
enhancement
|
06/04/2019
|
#40933
|
Improvements for get_file_data() function
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
07/18/2017
|
#43147
|
Introduce `esc_html_comment` and translation related functions
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
01/16/2019
|
#19100
|
Introduce esc_color()
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
enhancement
|
03/04/2020
|
#61501
|
KSES Allow more custom data attributes to align with browsers
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
07/11/2024
|
#28607
|
Make wpautop()'s $allblocks variable filterable
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
01/18/2017
|
#30531
|
Make wptexturize the last filter before output
|
azaozz
|
|
normal
|
normal
|
|
enhancement
|
06/04/2019
|
#35201
|
Mobile email validation
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
02/06/2017
|
#56774
|
Need more options on pre-existing blocks.
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
10/09/2022
|
#41422
|
Need replace_filter() function for improved Just In Time filter adjusment
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
08/03/2017
|
#26759
|
New Generic Sanitize Functions for Core
|
|
dev-feedback
|
normal
|
normal
|
|
enhancement
|
06/04/2019
|
#22330
|
Optimize regexes to remove protocol from URL
|
|
needs-unit-tests
|
normal
|
normal
|
|
enhancement
|
06/04/2019
|
#60319
|
PHPUnit test for wp_spaces_regexp
|
|
has-patch
|
normal
|
normal
|
Future Release
|
enhancement
|
10/09/2024
|
#60300
|
PHPunit Test for wp_staticize_emoji_for_email
|
|
has-patch
|
normal
|
normal
|
Future Release
|
enhancement
|
10/09/2024
|
#60301
|
PHPunit test for print_emoji_detection_script
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
10/09/2024
|
#60842
|
PHPunit tests for wp_check_invalid_utf8
|
|
has-patch
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
10/11/2024
|
#39636
|
Smilies not converted when directly followed by punctuation marks
|
|
dev-feedback
|
normal
|
normal
|
Future Release
|
enhancement
|
04/11/2022
|
#53709
|
Spaces as <br> in RSS Excerpts
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
07/25/2021
|
#39674
|
Special characters are encoded in the database, for site settings options
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
01/24/2017
|
#22402
|
Stripping non-alphanumeric multi-byte characters from slugs
|
|
dev-feedback
|
normal
|
normal
|
|
enhancement
|
06/04/2019
|
#52886
|
Update esc_url to allow for specifying an https:// as default protocol
|
|
has-patch
|
normal
|
normal
|
Future Release
|
enhancement
|
07/05/2022
|
#55962
|
Upgrade `sanitize_hex_color()` to CSS Color Level 4
|
pbearne
|
dev-feedback
|
normal
|
normal
|
Future Release
|
enhancement
|
01/17/2024
|
#56120
|
WordPress should add a space character on every possible "wrap point" in a post title when building "html title", "og:title" and so on
|
|
dev-feedback
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
07/05/2022
|
#43156
|
_walk_bookmarks(): please add the link id as HTML id attribute.
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
01/24/2018
|
#56663
|
`tag_escape()` does not follow naming convention.
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
09/27/2022
|
#12084
|
allow preserving HTML in the_excerpt (specify allowed tags for strip_tags in wp_trim_excerpt)
|
|
has-patch
|
normal
|
normal
|
|
enhancement
|
06/04/2019
|
#25856
|
debug of wpautop function with Unit Tests
|
|
|
normal
|
normal
|
|
enhancement
|
03/20/2024
|
#29910
|
esc_attr does not properly deal with json_encode
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
05/07/2017
|
#46188
|
esc_html does not have support for multiline output. esc_br_html or line-breaking parameter for esc_html is missing
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
03/02/2019
|
#33204
|
kses $allowedposttags should support microdata
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
11/15/2018
|
#32787
|
make_clickable filter
|
johnjamesjacoby
|
needs-unit-tests
|
normal
|
normal
|
Future Release
|
enhancement
|
08/02/2022
|
#40569
|
next_post_link parameters $format and $link, have default values that produce awkward to use output
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
04/26/2017
|
#46329
|
sanitize_text_field after 5.1 update should account for __toString() methods
|
|
|
normal
|
normal
|
Awaiting Review
|
enhancement
|
02/24/2019
|
#12056
|
target="_blank" being stripped from Profile Bio and Category Description
|
|
needs-unit-tests
|
normal
|
normal
|
Future Release
|
enhancement
|
10/03/2024
|