Skip to:
Content

BuddyPress.org

Opened 11 years ago

Closed 11 years ago

#6598 closed defect (bug) (fixed)

bp_get_message_thread_subject is double stripslashed

Reported by: johnjamesjacoby Owned by: johnjamesjacoby
Priority: normal Milestone: 2.3.3
Component: Messages Version: 1.5
Severity: normal Keywords:
Cc:

Description

In reviewing bp-messages-themes.php I noticed that the output of bp_get_message_thread_subject() is ran through stripslashes_deep before being filtered, and also has bp_get_message_thread_subject() hooked into the filter.

Change History (4)

#1 @johnjamesjacoby
11 years ago

  • Owner set to johnjamesjacoby
  • Status new → assigned
  • Summary bp_get_message_thread_subject is double strislashed → bp_get_message_thread_subject is double stripslashed

#2 @johnjamesjacoby
11 years ago

In 10056:

Messages: Remove duplicate stripslashes_deep() call in bp_get_message_thread_subject(). The output of bp_get_message_thread_subject() is already filtered by stripslashes_deep().

This changeset fixes the potential for malformed output to occur if slashes are used in the private message thread subject.

See #6598. For 2.4 (trunk)

#3 @johnjamesjacoby
11 years ago

In 10057:

Messages: Remove duplicate stripslashes_deep() call in bp_get_message_thread_subject(). The output of bp_get_message_thread_subject() is already filtered by stripslashes_deep().

This changeset fixes the potential for malformed output to occur if slashes are used in the private message thread subject.

See #6598. For 2.3.3 (2.3 branch)

#4 @johnjamesjacoby
11 years ago

  • Resolution → fixed
  • Status assigned → closed
Note: See TracTickets for help on using tickets.