Make WordPress Core

Opened 19 years ago

Closed 17 years ago

#5663 closed defect (bug) (duplicate)

URL sanitization is too restrictive

Reported by: nbachiyski Owned by: ryan
Priority: low Milestone:
Component: Permalinks Version:
Severity: minor Keywords: needs-patch early
Cc: Focuses:

Description

Url sanitization is too strict, it allows only character from the following class: [^a-z0-9-~+_.?#=!&;,/:%@]

A URL can contain every possible character, so we shouldn't strip them, but just escape accordingly.

Change History (3)

#1 @Denis-de-Bernardy
17 years ago

  • Keywords needs-patch early added

See also: #9591

#2 @Denis-de-Bernardy
17 years ago

  • Component GeneralPermalinks
  • Owner changed from anonymous to ryan
  • Priority normallow
  • Severity normalminor

#3 @ryan
17 years ago

  • Milestone 2.9
  • Resolutionduplicate
  • Status newclosed

We've opened to many more characters since this ticket was opened. Closing as a dupe.

Note: See TracTickets for help on using tickets.