Make WordPress Core

Opened 13 years ago

Closed 12 years ago

#19305 closed defect (bug) (fixed)

Link title with XML tags breaks preview of post

Reported by: baeldung's profile baeldung Owned by:
Milestone: 3.3 Priority: normal
Severity: normal Version:
Component: TinyMCE Keywords: close
Focuses: Cc:

Description

Hi,
I'm using Wordpress 3.2.1 on a 32 bit Ubuntu Server 11.04 machine.

I have noticed that introducing an xml tag in the title of a Link (via the Visual Editor not directly in HTML) will essentially break the entire display of the page (when previewing).
I'm thinking that the tags aren't properly escaped.
Example of Link title that breaks preview:

Add <http-digest> similar to <http-basic> to the security namespace
Thanks.

Change History (4)

#1 @toscho
13 years ago

  • Cc info@… added

I may be wrong, but I think that’s by intention to allow formatting of titles. See https://gist.github.com/1167559 for a plugin to fix it.

#2 @baeldung
13 years ago

That may be the case, but if the title is not well formatted, then the user should be warned and the value rejected. Allowing the value and then breaking the display of the post (in a major way - nothing after the link is displayed) is not very user friendly from a UX point of view.
Thanks for the feedback.

#3 @solarissmoke
13 years ago

  • Keywords close added

I can reproduce in 3.2, but it seems to be fixed in 3.3.

#4 @bpetty
12 years ago

  • Cc bpetty added
  • Component changed from General to TinyMCE
  • Milestone changed from Awaiting Review to 3.3
  • Resolution set to fixed
  • Status changed from new to closed

I was able to reproduce in 3.2, and confirmed as fixed in r18660 (between 3.2 and 3.3) with TinyMCE update to 3.4.5. See also #18107. Also still works in SVN trunk.

Note: See TracTickets for help on using tickets.