User description (profile) is stored in database html entity encoded

[markjaquith]

The user description (profile) is stored in the database encoded into html entities. This necessitates extra work if you actually want to display the user description on the site somewhere, like on their author page, and have things like links work.

[markjaquith]

Patch for /trunk/

[markjaquith]

Patch removes call to wp_specialchars();

This will need a security check to make sure that wp_specialchars() call wasn't protecting against script injection. It's already kses'd via filters, however.

[westi]

Do we need to do any database upgrade on this?

Where are we kses's the profile - a quick search lead me to nothing.

[ryan]

(In [4118]) Don't specialchar user description on save. fixes #3069

[ryan]

Most of the wp_specialchars calls in that function can be removed since the filters for those elements take care of specialchars.

[ryan]

(In [4230]) Don't specialchar user description on save. fixes #3069

[(none)]

Milestone 2.0.5 deleted