Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Tag Processor: Document and test XSS prevention in set_attribute #44447

Merged
merged 10 commits into from
Sep 29, 2022
Merged

Tag Processor: Document and test XSS prevention in set_attribute #44447

merged 10 commits into from
Sep 29, 2022

Commits on Sep 26, 2022

  1. Document and test encoding double quotes

    @adamziel
    adamziel committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    8bd5823 View commit details
    Browse the repository at this point in the history

  2. Reword the docstring

    @adamziel
    adamziel committed Sep 26, 2022
    Configuration menu
    Copy the full SHA
    4c522dd View commit details
    Browse the repository at this point in the history

Commits on Sep 27, 2022

  1. Encode < and > characters in set_attribute

    @adamziel
    adamziel committed Sep 27, 2022
    Configuration menu
    Copy the full SHA
    55a0a83 View commit details
    Browse the repository at this point in the history

Commits on Sep 28, 2022

  1. Use esc_attr to escape the attributes values

    @adamziel
    adamziel committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    1a84536 View commit details
    Browse the repository at this point in the history

  2. Escape attribute values using esc_attr

    @adamziel
    adamziel committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    6c309a8 View commit details
    Browse the repository at this point in the history

  3. decouple tests from behavior of esc_attr()

    @dmsnell
    dmsnell committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    eb8bda4 View commit details
    Browse the repository at this point in the history

  4. Decode character entities in get_attribute()

    @dmsnell
    dmsnell committed Sep 28, 2022
    Configuration menu
    Copy the full SHA
    907d37d View commit details
    Browse the repository at this point in the history

Commits on Sep 29, 2022

  1. Add WP_HTML_Tag_Processor_Test_WP file with tests requiring WordPress… 

    … libraries
    @adamziel
    adamziel committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    8cf66b0 View commit details
    Browse the repository at this point in the history

  2. Lint

    @adamziel
    adamziel committed Sep 29, 2022
    Configuration menu
    Copy the full SHA
    a1153e4 View commit details
    Browse the repository at this point in the history

  3. Merge branch 'trunk' into update/tag-processor-escape-attribute-values

    @adamziel
    adamziel authored Sep 29, 2022
    Configuration menu
    Copy the full SHA
    50bf5f0 View commit details
    Browse the repository at this point in the history