Skip to content

HTML API: Fix decoded attribute prefix matching#64

Open
sirreal wants to merge 2 commits into
trunkfrom
fix/html-decoder-attribute-prefix-match
Open

HTML API: Fix decoded attribute prefix matching#64
sirreal wants to merge 2 commits into
trunkfrom
fix/html-decoder-attribute-prefix-match

Conversation

@sirreal

@sirreal sirreal commented Jun 12, 2026

Copy link
Copy Markdown
Owner

Summary

  • Fix WP_HTML_Decoder::attribute_starts_with() so it only succeeds after the decoded prefix is fully matched.
  • Correct truncated-haystack cases and prefix checks ending inside multi-code-point character reference replacements.
  • Add focused decoder coverage for decoded attribute prefix matching.

Testing

  • Focused WP_HTML_Decoder PHPUnit coverage passes.
  • PHPCS pass for the changed decoder tests and implementation.
  • codex review --base trunk.

Trac ticket: https://core.trac.wordpress.org/ticket/65372

Use of AI Tools

AI assistance: Yes
Tool(s): Codex
Model(s): GPT-5.5
Used for: Splitting the fuzzer-discovered fix, PR description cleanup, and code review.


This Pull Request is for code review only. Please keep all other discussion in the Trac ticket. Do not merge this Pull Request. See GitHub Pull Requests for Code Review in the Core Handbook for more details.

@sirreal sirreal marked this pull request as ready for review June 12, 2026 22:11
@github-actions

github-actions Bot commented Jun 12, 2026

Copy link
Copy Markdown

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

Core Committers: Use this line as a base for the props when committing in SVN:

Props jonsurrell, sergeybiryukov.

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant