Ticket #5446 (closed defect: fixed)

Opened 7 months ago

Last modified 4 months ago

Return error when requesting invalid feed format

Reported by: pishmishy Assigned to: pishmishy
Priority: normal Milestone: 2.5
Component: General Version: 2.3.1
Severity: normal Keywords: has-patch feeds
Cc:

Description

Requesting an invalid feed format (say http://www.myblog.com/?feed=foo) results in a blank page. This is due to do_feed() in functions.php calling hooked actions without any feedback on whether the appropriate action actually exists. Depends on #5445.

Attachments

5446.patch (0.5 kB) - added by pishmishy on 12/12/07 12:53:42.
New patch, translatable and escaped text

Change History

12/10/07 10:17:42 changed by pishmishy

  • status changed from new to assigned.

12/10/07 14:11:45 changed by pishmishy

Revised patch using feedback from #5445

12/10/07 18:35:38 changed by ryan

$feed needs to be escaped to avoid XSS. The message also need to be marked for translation.

12/12/07 12:53:42 changed by pishmishy

  • attachment 5446.patch added.

New patch, translatable and escaped text

02/26/08 10:05:05 changed by ryan

  • status changed from assigned to closed.
  • resolution set to fixed.

(In [7038]) Return error when requesting invalid feed format. Props pishmishy. fixes #5446

02/26/08 10:05:16 changed by ryan

  • milestone changed from 2.6 to 2.5.