Opened 19 years ago
Closed 19 years ago
#3808 closed defect (bug) (worksforme)
URI for preview pane in post template contains unescaped ampersand
| Reported by: | ara_p | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Administration | Version: | 2.1 |
| Severity: | normal | Keywords: | amp entity |
| Cc: | Focuses: |
Description
The URI passed to the preview pane in the post template contains an unescaped ampersand. This normally doesn't cause people a problem but in situations where the site pages are delivered as XML (using the application/xhtml+xml MIME type) the preview breaks due to the unescaped character.
The bug can be found in /wp-admin/post.php (line 84):
<iframe src="<?php echo attribute_escape(apply_filters('preview_post_link', ...
Change History (3)
Note:
See TracTickets
for help on using tickets.
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png)
attribute_escape()takes care of that, encoding to&Checked
/branches/2.0/,/branches/2.1/, and/trunk/and all useattribute_escape()there.