Skip to:
Content

BuddyPress.org

Opened 11 years ago

Closed 11 years ago

Last modified 10 years ago

#6952 closed defect (bug) (fixed)

Cover image inline CSS should use esc_url_raw() instead of esc_url() to escape attachment path.

Reported by: DJPaul Owned by: djpaul
Priority: normal Milestone: 2.5.1
Component: Media Version:
Severity: normal Keywords:
Cc:

Description

The & character in a chained set of query parameters was being escaped. I discovered this while implementing support for a Photon-like service.

Change History (4)

#1 @DJPaul
11 years ago

  • Milestone Awaiting Review → 2.5.1

#2 @djpaul
11 years ago

  • Owner set to djpaul
  • Resolution → fixed
  • Status new → closed

In 10643:

Attachments: when rendering inline CSS for cover images, use esc_url_raw to escape the image path.

This prevents entities such as & being decoded into &#038, which can break image URLs that rely on querystring parameters for functionality.

Fixes #6952

#3 @djpaul
11 years ago

In 10644:

Attachments: when rendering inline CSS for cover images, use esc_url_raw to escape the image path.

This prevents entities such as & being decoded into &#038, which can break image URLs that rely on querystring parameters for functionality.

Fixes #6952 (2.5 branch)

#4 @DJPaul
10 years ago

  • Component API - Avatars → Media
Note: See TracTickets for help on using tickets.