[wp-trac] [WordPress Trac] #20106: Escape links in get_the_term_list function

WordPress Trac wp-trac at lists.automattic.com
Sun Apr 1 19:08:56 UTC 2012


#20106: Escape links in get_the_term_list function
--------------------------+--------------------
 Reporter:  alex-ye       |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  3.4
Component:  Taxonomy      |     Version:  3.3.1
 Severity:  normal        |  Resolution:
 Keywords:  has-patch     |
--------------------------+--------------------

Comment (by SergeyBiryukov):

 Replying to [ticket:20106 alex-ye]:
 > I create a copy function to get_the_term_list() just to escape the links
 in it , because there is no filters to do that

 Well, there is `"term_links-$taxonomy"`, though I guess using it to escape
 the links would require `preg_replace()`.

 There are more unescaped links in `wp-includes/category-template.php`. Not
 sure if all of them should be escaped, but most of them are returned by
 `get_term_link()` as well, and it probably makes sense to be consistent.
 Made the patch just in case.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/20106#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list