Bug in td_util::excerpt!

if (td_util::get_option(‘tds_breadcrumbs_show_article’) != ‘hide’) {
//child category
$breadcrumbs_array [] = array (
‘title_attribute’ => ”,
‘url’ => ”,
‘display_name’ => td_util::excerpt($post_title, 13)
);

}

$post_title is enttity encoded. And the excerpt function will split entities like & # 2 6 9 ; at arbitrary position. there are a lot of attack vectors that are based on strings being cutted at arbitrary position (see the UTF8 4 Byte encoding problem recently fixed in WP.) Although in this case i currently do not see any real security related attack vector, but it leads to completly crushed display whenn thhis entities are cutted at arbitrary position: I got this result displayed which looks real ugly: �….

Would be kind to fix this bug.

Thanks

• This topic was modified 11 years by newbie.
• This topic was modified 11 years by newbie.
• This topic was modified 11 years by newbie.