Make WordPress Core

Opened 15 years ago

Closed 14 years ago

#7796 closed defect (bug) (worksforme)

Export doesn't enclose comment content text in <![CDATA[ even though people can include stuff that breaks parsers in comments

Reported by: nyohannes's profile nyohannes Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Export Keywords:
Focuses: Cc:

Description

It's common for people to link to stuff in a comment.

If you export a blog using the exporter, <wp:comment_content> isn't escaped using a <![CDATA

If someone included a url with valid url parameters in their comment text, e.g.,

"Yes, the release notes are available at our online forum:
http://www.intellij.net/forums/thread.jspa?threadID=274511&tstart=0"

It would break any parsers trying to import that comment

Change History (4)

#1 @ryan
15 years ago

  • Component changed from General to Export
  • Owner anonymous deleted

#2 @janeforshort
15 years ago

  • Milestone changed from 2.8 to 2.9

Punting due to feature freeze. Reconsider with next release.

#4 @nacin
14 years ago

  • Milestone 2.9 deleted
  • Resolution set to worksforme
  • Status changed from new to closed

Appears to have been fixed in [7299] seven months before. Closed pending reporter feedback.

Note: See TracTickets for help on using tickets.