Make WordPress Core

Opened 7 years ago

Last modified 2 years ago

#30300 new defect (bug)

setUserSetting js function only removes first unwanted character — at Version 1

Reported by: TV productions Owned by:
Milestone: Priority: normal
Severity: normal Version: 2.7
Component: Administration Keywords: has-patch dev-feedback
Focuses: javascript Cc:

Description (last modified by TobiasBg)

The function comments of the function setUserSetting in wp-includes/js/utils.js says the following: "Both name and value must be only ASCII letters, numbers or underscore (...)". The function removes the unwanted characters with the js replace function, in the current code, it only removes the first occurrence of an unwanted character. This is solved by adding the g modifier to the replace regex. See the attached patch.

How to reproduce:

  • Open your browsers console while you are logged in to your WordPress installation.
  • Run the following command: setUserSetting('test--', 'bad-value-') (note that the - character is not allowed)
  • The console will return "test-" (not "test" as expected).
  • Run getUserSetting('test-').
  • The console returns "badvalue-" (not "badvalue" as expected).
  • You may want to delete the setting by executing deleteUserSetting('test-').

Change History (2)

@TV productions
7 years ago

Replace regex with the g modifier

#1 @TobiasBg
7 years ago

  • Description modified (diff)
  • Keywords has-patch added
  • Summary changed from setUserSetting js function only removes first unwanted charter to setUserSetting js function only removes first unwanted character
Note: See TracTickets for help on using tickets.