Skip to content

v1.0.34 — Fix HTML sanitizer numeric entity attribute parsing

Latest
Latest

Choose a tag to compare

View all tags
@webwizo webwizo released this 01 Sep 10:52
· 2 commits to master since this release
v1.0.34
00fc784

Fixed

  • Fix shortcode attribute parsing when content passes through HTML sanitizers that encode = and " as numeric entities (=, "). htmlspecialchars_decode() alone does not decode numeric entities, so attributes were mis-parsed as numeric-indexed fragments instead of named key/value pairs.

Tests

  • Add package regression test HtmlEntityAttributeParsingTest covering numeric-entity attribute decoding via parseAttributes() and full compile() flow.
Assets 2
Loading