• Hey um, anyone – I don’t know if there is a place to put bug things, or even if you already know about it or whatever… but,

    If a post has a single quote in the title, then it doesn’t get correctly escaped in the edit.php list page – eg, from my site:

    return confirm('You are about to delete this post 'XBM graphics format? What the bloomin' heck?'n 'OK' to delete, 'Cancel' to stop.')

    the single quote on bloomin’ is not escaped. This unfortunately let me delete a post without confirmation, which I accidently did 🙂

    To get around it I replaced all single quotes with nothing (as its just for the javascript confirm) in the control_delete case around the wp_specialchars(get_the_title('', ''), 1) line.

Viewing 5 replies - 1 through 5 (of 5 total)
  • http://mosquito.wordpress.org

    I don’t recall seeing a bug along these lines, but you can search before submitting a report.

    Thread Starter nmoog

    (@nmoog)

    Yep, I did a search which didn’t turn up anythign. Then, I not only made sure it was replicable, I even submitted a possible fix.

    I’m not sure what your condescending link was for.

    I don’t think he was condescending, he was showing you where bug reports go.

    Thread Starter nmoog

    (@nmoog)

    If there was an embarrased tag supported in wordpress, I’d enclose this whole post in it…

    Sorry Kafkaesqui thats exactly what I was looking for – but the only thing on the entrance page to “mosquito” was a link to an old bug-posting doc which I thought you were pointing me at!

    Sorry again,

    Close embarassed tag.

    Hey, no problem. You know what they say about the ability to read someones intent in the one-dimensional realm that are the internets…

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Bug in admin post list’ is closed to new replies.