Make WordPress Core

Opened 17 years ago

Closed 17 years ago

Last modified 17 years ago

#9432 closed defect (bug) (fixed)

Output Broken: Ticket for collecting patches to proplery encode script and other href attribute values

Reported by: hakre Owned by:
Priority: normal Milestone: 2.8
Component: Validation Version: 2.7.1
Severity: normal Keywords: has-patch
Cc: Focuses:

Description

The output does not validate in certain points because ampersands (&) are not properly used within urls (should be & not a sole &).

this ticket contains patches to fix various of such issues.

Attachments (6)

qcop-r00-ampersand-post.patch (566 bytes ) - added by hakre 17 years ago.
amp; was missing on post edit page
qcop-r00-ampersand-andthelike-codepress.patch (1.5 KB ) - added by hakre 17 years ago.
codepress validation patch
qcop-r00-ampersand-andthelike-plugin-editor.patch (2.4 KB ) - added by hakre 17 years ago.
plugin editor multiple ampersands and a missing ID (accidently taken over from the theme editor, had to be named plugin)
9432-comment-dashboard.patch (981 bytes ) - added by hakre 17 years ago.
clean_url()
9432-post-script-cdata.patch (952 bytes ) - added by hakre 17 years ago.
missing cdata added.
9432-package.patch (1.9 KB ) - added by hakre 17 years ago.
Put both new patches into one.

Download all attachments as: .zip

Change History (20)

@hakre
17 years ago

amp; was missing on post edit page

@hakre
17 years ago

codepress validation patch

@hakre
17 years ago

plugin editor multiple ampersands and a missing ID (accidently taken over from the theme editor, had to be named plugin)

#1 @hakre
17 years ago

Finished with checking the Admin. All pages dones. This should fix all amp; Issues in the Admin but not one with generating CSS for the default theme header image. But that is not solveable w/o changing the overall parameter design.

#2 @ryan
17 years ago

  • Component GeneralValidation
  • Owner anonymous removed

#4 @hakre
17 years ago

when #9402 is fixed with a changeset, these patches here need to be updated.

#5 @Denis-de-Bernardy
17 years ago

  • Milestone 2.8Future Release

patch is b0rke (or possibly it no longer applies)

#6 @ryan
17 years ago

  • Milestone Future Release2.8
  • Resolutionfixed
  • Status newclosed

I think everything went in on other tickets.

#7 @hakre
17 years ago

_wp_dashboard_recent_comments_row() in dashboard.php is using get_comment_link() but does not escape it properly for XHTML usage. I created a helper function to do the job (so that a single point needs to be fixed in case of a bad implementation). Patch follows.

@hakre
17 years ago

clean_url()

#8 @hakre
17 years ago

forget the note about the helper function, clean_url() does it.

#9 @hakre
17 years ago

  • Resolution fixed
  • Status closedreopened

@hakre
17 years ago

missing cdata added.

#10 @hakre
17 years ago

clean_url() does not &ersand, esc_attr() should be used.

#11 @Denis-de-Bernardy
17 years ago

mmm, you may want to double check that. when the output is meant to be displayed (the default), it should convert un-converted & to &. westi raised a separate bug the other day, however, related to double-escaping no longer occurring or something.

@hakre
17 years ago

Put both new patches into one.

#12 @hakre
17 years ago

double checked it now, clean_url() does &038; (same as &), so it is OK to use it. esc_attr() does &, so it is OK for that to use it as well. clean_url() is my preference here.

i put both changes into one patchfile as well.

#13 @azaozz
17 years ago

  • Resolutionfixed
  • Status reopenedclosed

(In [11375]) HTML validity fixes, props hakre, fixes #9432

#14 @hakre
17 years ago

missing fixes went into a new ticket, see #10257

Note: See TracTickets for help on using tickets.