diff options
author | John James Jacoby <johnjamesjacoby@git.wordpress.org> | 2021-11-02 18:46:36 +0000 |
---|---|---|
committer | John James Jacoby <johnjamesjacoby@git.wordpress.org> | 2021-11-02 18:46:36 +0000 |
commit | 8f9eea80f93fb12e17ffbd39a74e4cc44e20fa4c (patch) | |
tree | 56d7434cb1f0ad49c6749003dd72b936c138873a /tests/visual-regression/specs | |
parent | d7518d1927eec720f00626adcc8c1e06f1a7dd25 (diff) | |
download | wordpress-8f9eea80f93fb12e17ffbd39a74e4cc44e20fa4c.tar.gz wordpress-8f9eea80f93fb12e17ffbd39a74e4cc44e20fa4c.zip |
Permalinks: Sanitize non-visible characters inside `sanitize_title_with_dashes()`.
This change prevents non-visible characters in titles from creating encoded values in permalinks, opting instead for the following replacement strategy:
* Non-visible non-zero-width characters are replaced with hyphens
* Non-visible zero-width characters are removed entirely
Included with this change are 64 additional PHPUnit assertions to confirm that only the targeted non-visible characters are sanitized as intended.
Before this change, URLs would unintentionally contain encoded values where these non-visible characters were. After this change, URLs intentionally strip out or hyphenate these non-visible characters.
Props costdev, dhanendran, hellofromtonya, paaljoachim, peterwilsoncc, poena, sergeybiryukov.
Fixes #47912.
git-svn-id: https://develop.svn.wordpress.org/trunk@51984 602fd350-edb4-49c9-b593-d223f7449a82
Diffstat (limited to 'tests/visual-regression/specs')
0 files changed, 0 insertions, 0 deletions