Skip to content

HTML not being escaped correctly #1

@bramus

Description

@bramus

I've just upgrade to Wordpress 5.5 and noticed that the entire post contents got shown double. Upon deactivating the plugin all worked fine again.

Problem is the og:description, which contains the full post contents (unescaped):

<meta property="og:site_name" content="Bram.us" />
<meta property="og:url" content="https://www.bram.us/2020/08/11/httpstat-curl-statistics-made-simple/" />
<meta property="og:title" content="httpstat – curl statistics made simple" />
<meta property="og:description" content="<p><img src=" https: www.bram.us wordpress wp-content uploads 2020 08 httpstat.png" alt="" width="865" height="521" class="alignnone size-full wp-image-24848" /></p>
<blockquote><p>httpstat visualizes <code>curl(1)</code> statistics in a way of beauty and clarity.</p><p>It is a single file🌟 Python script that has no dependency👏 and is compatible with Python 3🍻.</p></blockquote>
<p>Installation through PiP or HomeBrew:</p>
<pre><code>pip install httpstat
brew install httpstat</code></pre>
<p>Once installed through one of those, you can directly call <code>httpstat</code>:</p>
<pre><code>httpstat https://www.bram.us/</code></pre>
<p><a href="https://github.com/reorx/httpstat"><code>httpstat</code> – curl statistics made simple &rarr;</a></p>
"/>
<meta property="og:image" content="https://www.bram.us/wordpress/wp-content/uploads/2020/08/httpstat.png" />

Never had this issue with earlier Wordpress versions.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions