WordPress.org
Get WordPress

Make WordPress Core

Opened 16 years ago

Closed 16 years ago

Last modified 16 years ago

#13419 closed defect (bug) (worksforme)

comment_excerpt does not use htmlspecialchars

Reported by: gene91 Owned by:
Priority: normal Milestone:
Component: Comments Version:
Severity: normal Keywords: comment_excerpt
Cc: Focuses:

Description

As a result, I will have to always use
echo htmlspecialchar(get_comment_excerpt())
if I don't want my blog goes wrong as there could be quotes in the comment.

Change History (3)

#1 @scribu
16 years ago

  • Resolution → worksforme
  • Status new → closed

You can add this single line into your theme's functions.php:

add_filter('comment_excerpt', 'esc_html');

#2 @scribu
16 years ago

  • Milestone Awaiting Review

#3 @nacin
16 years ago

I don't even see the use case for doing so. It's already kses'd.

Note: See TracTickets for help on using tickets.