WordPress.org
Get WordPress

Make WordPress Core

Opened 13 years ago

Closed 13 years ago

#25704 closed defect (bug) (fixed)

Quotes in link titles aren't being properly escaped in the non-"visual" text editor

Reported by: ToBeFree Owned by: azaozz
Priority: normal Milestone: 3.9
Component: Editor Version: 3.7
Severity: normal Keywords:
Cc: Focuses:

Description

Steps to reproduce:

  • Create a new article using the "text" editor
  • Use the "insert link" button
  • Try using any URL and a title with "-quotes, like... 
Here you can see the error message "404 Not Found", which is annoying.
  • Save/Publish the article, hover over the link and see what happened

In this case, it's only annoying, but there might be inputs where the result is worse.

Attachments (1)

25704-braces.patch​ (527 bytes ) - added by TobiasBg 13 years ago.
Add braces

Download all attachments as: .zip

Change History (6)

#1 @azaozz
13 years ago

  • Owner set to azaozz
  • Resolution → fixed
  • Status new → closed

In 27071:

WP_Link: convert < > and " to HTML entities when setting link title for the Text editor. Fixes #25704.

#2 @azaozz
13 years ago

  • Milestone Awaiting Review → 3.9

@ToBeFree thanks for the report. Yes, it is incorrect and annoying.

#3 @TobiasBg
13 years ago

  • Resolution fixed
  • Status closed → reopened

This needs braces, see patch.

@TobiasBg
13 years ago

Add braces

#4 @SergeyBiryukov
13 years ago

#26307 was marked as a duplicate.

#5 @SergeyBiryukov
13 years ago

  • Resolution → fixed
  • Status reopened → closed

In 27082:

Add braces around conditionals. props TobiasBg. fixes #25704.

Note: See TracTickets for help on using tickets.