WordPress.org
Get WordPress

Make WordPress Core

Changes between Initial Version and Version 13 of Ticket #57336


Ignore:
Timestamp:
10/13/2023 09:39:32 PM (3 years ago)
Author:
rajinsharwar
Comment:

Hi @nicolefurlan @oglekler, updated the title and description for the ticket. :) Let me know if I missed anything.

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #57336

    • Property Keywords has-testing-info added
    • Property Milestone Awaiting Review → 6.4
    • Property Owner changed from rafiq91 to rajinsharwar
    • Property Component Login and Registration → Networks and Sites
    • Property Focuses multisite added; privacy removed
    • Property Summary Sanitize url and title missing → Escape missing URLs and HTML element content in wp-activate.php

  • Ticket #57336 – Description

    initial v13  
    1 1. The login title in wp-login.php is not sanitized properly https://prnt.sc/MJLEeeUWf7BE
    2 2. Network site URL is also not properly sanitized https://prnt.sc/6rFVD0ClxbO-
     1In the wp-activate.php file,
     2
     31. We have some unescaped instances of the "network_site_url()" function.
     42. We have some unescaped URLs being used.
     53. We have some unescaped HTML element content.
     6
     7This ticket escapes the missing unescaped instances.