WordPress.org
Get WordPress

Make WordPress Core

Opened 17 years ago

Closed 17 years ago

Last modified 17 years ago

#11119 closed task (blessed) (fixed)

Press This Security Fix

Reported by: noel Owned by: noel
Priority: high Milestone: 2.8.6
Component: Press This Version:
Severity: normal Keywords: press this, has-patch
Cc: Focuses:

Description

Potential XSS for logged in users.

Patch attached.

Attachments (2)

press-this-xss-bug-11-10-2009.patch​ (736 bytes ) - added by noel 17 years ago.
fixes potential xss issue
press-this.002.diff​ (1.8 KB ) - added by markjaquith 17 years ago.

Download all attachments as: .zip

Change History (6)

@noel
17 years ago

fixes potential xss issue

@markjaquith
17 years ago

#1 @markjaquith
17 years ago

  • Resolution → fixed
  • Status new → closed

(In [12168]) Prevent XSS in press-this.php. props Benjamin Flesch. fixes #11119

#2 @markjaquith
17 years ago

(In [12169]) Some extra XSS protection. Redundant, but we should always escape late! see #11119

#3 @markjaquith
17 years ago

(In [12170]) Prevent XSS in press-this.php. props Benjamin Flesch. fixes #11119 for 2.8.x

#4 @ryan
17 years ago

  • Milestone 2.9 → 2.8.6
Note: See TracTickets for help on using tickets.