Bug in admin post list
-
Hey um, anyone – I don’t know if there is a place to put bug things, or even if you already know about it or whatever… but,
If a post has a single quote in the title, then it doesn’t get correctly escaped in the edit.php list page – eg, from my site:
return confirm('You are about to delete this post 'XBM graphics format? What the bloomin' heck?'n 'OK' to delete, 'Cancel' to stop.')the single quote on bloomin’ is not escaped. This unfortunately let me delete a post without confirmation, which I accidently did 🙂
To get around it I replaced all single quotes with nothing (as its just for the javascript confirm) in the control_delete case around the
wp_specialchars(get_the_title('', ''), 1)line.
The topic ‘Bug in admin post list’ is closed to new replies.