WordPress.org
Get WordPress

Make WordPress Core

Opened 7 years ago

Closed 7 years ago

#47482 closed defect (bug) (fixed)

atom_site_icon() function not escaped

Reported by: shawfactor Owned by: SergeyBiryukov
Priority: normal Milestone: 5.3
Component: Feeds Version: 4.3
Severity: minor Keywords: has-patch
Cc: Focuses:

Description

The outputted url of the atom_site_icon function is not appropriately xml escaped. This creates invalid atom feeds when the site icons url include multiple get parameters as the & symbol creates invalid xml.

Attachments (1)

47482.diff​ (342 bytes ) - added by abhijitrakas 7 years ago.
Escape URL before use.

Download all attachments as: .zip

Change History (5)

#1 @desrosj
7 years ago

  • Keywords needs-patch added
  • Milestone Awaiting Review → Future Release
  • Version 5.2.1 → 4.3

Hi @shawfactor,

Thanks for this ticket!

Are you interested in creating a patch for this? If you need some help getting started, there are lots of ​helpful tips in the Core Handbook.

@abhijitrakas
7 years ago

Escape URL before use.

#2 @abhijitrakas
7 years ago

  • Keywords has-patch added; needs-patch removed

#3 @SergeyBiryukov
7 years ago

  • Milestone Future Release → 5.3
  • Owner set to SergeyBiryukov
  • Status new → reviewing

#4 @SergeyBiryukov
7 years ago

  • Resolution → fixed
  • Status reviewing → closed

In 45753:

Feeds: Escape & characters in atom_site_icon() for XML, for consistency with rss2_site_icon().

Props abhijitrakas, shawfactor.
Fixes #47482.

Note: See TracTickets for help on using tickets.