strip_tags not working in title?

  • Hi Ajay!
    I don’t think the strip_tags($title) on line 219 of top-core.php is working.
    A title like:
    Redskins Coach Says "Stats Are Always For Losers," Which Is Funny Because Stats Show He's A Loser
    becomes on Twitter:
    Redskins Coach Says "Stats Are Always For Losers," Which Is Funny Because Stats Show He's A Loser
    the HTML source as shown by Twitter:
    Redskins Coach Says "Stats Are Always For Losers," Which Is Funny Because Stats Show He's A Loser
    maybe it would be better to convert them using htmlentities() or
    htmlspecialchars().
    Thanks!
    -Brian

    https://www.ads-software.com/plugins/tweet-old-post/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Thread Starter Brian Brown, Ph.D.

    (@brianbrown)

    I guess WordPress altered the HTML.
    The HTML as rendered on Twitter is:
    Redskins Coach Says &_amp;quot;Stats Are Always For Losers,&_amp;quot; Which Is Funny Because Stats Show He's A Loser
    without the underscores “_” in &_amp
    Note that there aren’t any changes being made for a single quote so maybe they have a problem with the double quotes only. Its probably a security issue.
    Maybe the first occurrence of a double quote should be changed to “ (left double quotes) and the next occurrence to next to ” (” right double quotes) or all double quotes changed to an apostrophe (‘).
    Here’s a screenshot: https://www.brianbrown.net/example.png
    -B

    Plugin Author Codeinwp

    (@codeinwp)

    Hi Brian,

    Thanks a lot for the report and sorry for the late answer, we are looking into this.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘strip_tags not working in title?’ is closed to new replies.