Make WordPress Core

Opened 12 years ago

Closed 11 years ago

#19305 closed defect (bug) (fixed)

Link title with XML tags breaks preview of post

Reported by: baeldung's profile baeldung Owned by:
Milestone: 3.3 Priority: normal
Severity: normal Version:
Component: TinyMCE Keywords: close
Focuses: Cc:


I'm using Wordpress 3.2.1 on a 32 bit Ubuntu Server 11.04 machine.

I have noticed that introducing an xml tag in the title of a Link (via the Visual Editor not directly in HTML) will essentially break the entire display of the page (when previewing).
I'm thinking that the tags aren't properly escaped.
Example of Link title that breaks preview:

Add <http-digest> similar to <http-basic> to the security namespace

Change History (4)

#1 @toscho
12 years ago

  • Cc info@… added

I may be wrong, but I think that’s by intention to allow formatting of titles. See for a plugin to fix it.

#2 @baeldung
12 years ago

That may be the case, but if the title is not well formatted, then the user should be warned and the value rejected. Allowing the value and then breaking the display of the post (in a major way - nothing after the link is displayed) is not very user friendly from a UX point of view.
Thanks for the feedback.

#3 @solarissmoke
12 years ago

  • Keywords close added

I can reproduce in 3.2, but it seems to be fixed in 3.3.

#4 @bpetty
11 years ago

  • Cc bpetty added
  • Component changed from General to TinyMCE
  • Milestone changed from Awaiting Review to 3.3
  • Resolution set to fixed
  • Status changed from new to closed

I was able to reproduce in 3.2, and confirmed as fixed in r18660 (between 3.2 and 3.3) with TinyMCE update to 3.4.5. See also #18107. Also still works in SVN trunk.

Note: See TracTickets for help on using tickets.