magdev/wp-bootstrap
1
Fork 0
Code Issues Pull Requests Actions Releases 24 Activity

24 Releases 24 Tags

  • v1.0.10 0902c5e1a5
    Compare

    WP Bootstrap 1.0.10
    All checks were successful
    Create Release Package / PHP Lint (push) Successful in 1m10s
    Details
    Create Release Package / Build Release (push) Successful in 1m50s
    Details
    Stable

    magdev released this 2026-02-25 19:20:36 +00:00 | 8 commits to main since this release

    Fixed

    • Title double-encoding in Twig templates (inc/Template/ContextBuilder.php): WordPress's get_the_title() pre-encodes & as &. When passed to Twig with autoescape enabled, the & in & was escaped again to &, rendering as literal & in the browser (e.g. "Bewerbungen & Nachrichten" instead of "Bewerbungen & Nachrichten"). Fixed by wrapping all 6 get_the_title() calls with wp_specialchars_decode() to decode WordPress entities before Twig. Twig autoescape then properly re-encodes & → &. This is XSS-safe because Twig still escapes all output.
    Downloads