Automattic / jetpack

Security, performance, marketing, and design tools — Jetpack is made by WordPress experts to make WP sites safer and faster, and help you grow your traffic.
https://jetpack.com/
Other
1.59k stars 799 forks source link

Comments: ampersand triggers "Invalid security token" warning #2898

Open jeherve opened 9 years ago

jeherve commented 9 years ago

Steps to reproduce:

  1. Enable Jetpack Comments.
  2. Go to a post including a comment form.
  3. Enter the following in the comment field: test & test again
  4. Submit your comment.

https://cloudup.com/clQhQJ61_HB

I couldn't reproduce on WordPress.com.

Reported here: https://wordpress.org/support/topic/invalid-security-token-when-exists-in-comment?replies=1&view=all

lschuyler commented 7 years ago

Reported in 3095670-t

stale[bot] commented 6 years ago

This issue has been marked as stale. This happened because:

No further action is needed. But it's worth checking if this ticket has clear reproduction steps and it is still reproducible. Feel free to close this issue if you think it's not valid anymore — if you do, please add a brief explanation.

macmanx2 commented 5 years ago

Also reported at https://wordpress.org/support/topic/invalid-security-token-with-embed-codes/

stale[bot] commented 5 years ago

This issue has been marked as stale. This happened because:

No further action is needed. But it's worth checking if this ticket has clear reproduction steps and it is still reproducible. Feel free to close this issue if you think it's not valid anymore — if you do, please add a brief explanation.